[PATCHv9 00/11] nvme: In-band authentication support
Sagi Grimberg
sagi at grimberg.me
Thu Mar 24 10:06:52 PDT 2022
> Hi all,
>
> recent updates to the NVMe spec have added definitions for in-band
> authentication, and seeing that it provides some real benefit
> especially for NVMe-TCP here's an attempt to implement it.
>
> Thanks to Nicolai Stange the crypto DH framework has been upgraded
> to provide us with a FFDHE implementation; I've updated the patchset
> to use the ephemeral key generation provided there.
>
> Note that this is just for in-band authentication. Secure
> concatenation (ie starting TLS with the negotiated parameters)
> requires a TLS handshake, which the in-kernel TLS implementation
> does not provide. This is being worked on with a different patchset,
> and subject to discussion at LSF..
>
> The nvme-cli support has already been merged; please use the latest
> nvme-cli git repository to build the most recent version.
>
> A copy of this patchset can be found at
> git://git.kernel.org/pub/scm/linux/kernel/git/hare/scsi-devel
> branch auth.v9
>
> As usual, comments and reviews are welcome.
Hannes, can you resend blktests patch set as well?
IIRC one test there acted funky...
More information about the Linux-nvme
mailing list