diff options
| author | pjd <pjd@FreeBSD.org> | 2010-09-23 11:49:47 +0000 |
|---|---|---|
| committer | pjd <pjd@FreeBSD.org> | 2010-09-23 11:49:47 +0000 |
| commit | ed0ad07f3dd1bc5f1fad46c75e5d57ecbbca3cf8 (patch) | |
| tree | b964c8ab4d3ce3c31a74eb0012bc3b98d1bd45c7 /sys/geom/eli/g_eli_integrity.c | |
| parent | 7c5b734f64e42e6d5b7864578947df2fe8b2149b (diff) | |
| download | FreeBSD-src-ed0ad07f3dd1bc5f1fad46c75e5d57ecbbca3cf8.zip FreeBSD-src-ed0ad07f3dd1bc5f1fad46c75e5d57ecbbca3cf8.tar.gz | |
Implement switching of data encryption key every 2^20 blocks.
This ensures the same encryption key won't be used for more than
2^20 blocks (sectors). This will be the default now.
MFC after: 1 week
Diffstat (limited to 'sys/geom/eli/g_eli_integrity.c')
| -rw-r--r-- | sys/geom/eli/g_eli_integrity.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/geom/eli/g_eli_integrity.c b/sys/geom/eli/g_eli_integrity.c index b9a3f31..8b98e21 100644 --- a/sys/geom/eli/g_eli_integrity.c +++ b/sys/geom/eli/g_eli_integrity.c @@ -507,7 +507,7 @@ g_eli_auth_run(struct g_eli_worker *wr, struct bio *bp) if (bp->bio_cmd == BIO_WRITE) crde->crd_flags |= CRD_F_ENCRYPT; crde->crd_alg = sc->sc_ealgo; - crde->crd_key = sc->sc_ekey; + crde->crd_key = g_eli_crypto_key(sc, dstoff, encr_secsize); crde->crd_klen = sc->sc_ekeylen; g_eli_crypto_ivgen(sc, dstoff, crde->crd_iv, sizeof(crde->crd_iv)); |
