37  * All master keys are stored encrypted on disk in the form of the DSL
57  * The DSL Crypto Key Tree:
58  * The DSL Crypto Keys (DCK) are the in-memory representation of decrypted
61  * dataset will share a DSL Crypto Key, so they are also refcounted. Once the
66  * the DSL Crypto Keys can belong to multiple datasets, we maintain a tree of
68  * appropriate DSL Crypto Key. The management for creating and destroying these
225 	 * maintained through the DSL.  in dsl_crypto_params_create_nvlist()
482 	/* hold the dsl dir */  in dsl_crypto_can_set_keylocation()
725 	/* Release the wrapping key (the dsl key now has a reference to it) */  in spa_keystore_dsl_key_hold_dd()
801 	/* hold the dsl dir */  in spa_keystore_load_wkey()
818 	/* verify that the wkey is correct by opening its dsl key */  in spa_keystore_load_wkey()
824 	/* initialize the wkey encryption parameters from the DSL Crypto Key */  in spa_keystore_load_wkey()
853 	 * be used to decrypt a DSL Crypto Key. We can simply cleanup and  in spa_keystore_load_wkey()
941 	/* hold the dsl dir */  in spa_keystore_unload_wkey()
1119  * DSL Crypto Keys for encryption. Callers must release the key with
1184 	/* check if this dd has a has a dsl key */  in dsl_dataset_get_keystatus()
1459 	/* ignore special dsl dirs */  in spa_keystore_change_key_sync_impl()
1469 	 * Stop recursing if this dsl dir didn't inherit from the root  in spa_keystore_change_key_sync_impl()
1503 	/* Recurse into all child dsl dirs. */  in spa_keystore_change_key_sync_impl()
1514 	 * Recurse into all dsl dirs of clones. We utilize the skip parameter  in spa_keystore_change_key_sync_impl()
1713 	 * the DSL Crypto Key to point to the target instead.  in dsl_dataset_promote_crypt_check()
1766 	 * DSL Crypto Key and keylocation to reflect that. We also need to  in dsl_dataset_promote_crypt_sync()
1767 	 * update the DSL Crypto Keys of all children inheritting their  in dsl_dataset_promote_crypt_sync()
1968 	/* Create or clone the DSL crypto key and activate the feature */  in dsl_dataset_create_crypt_sync()
2181 	 * all of the fields of a DSL Crypto Key, as well as a fully specified  in dsl_crypto_recv_raw_key_check()
2278 	/* lookup the values we need to create the DSL Crypto Key */  in dsl_crypto_recv_raw_key_sync()
2294 	/* if this is a new dataset setup the DSL Crypto Key. */  in dsl_crypto_recv_raw_key_sync()
2296 		/* zapify the dsl dir so we can add the key object to it */  in dsl_crypto_recv_raw_key_sync()
2300 		/* create the DSL Crypto Key on disk and activate the feature */  in dsl_crypto_recv_raw_key_sync()
2396  * This function is used to sync an nvlist representing a DSL Crypto Key and
2443 	/* lookup values from the DSL Crypto Key */  in dsl_crypto_populate_key_nvlist()
2492 	 * not correctly add these values to the wrapping key or the DSL  in dsl_crypto_populate_key_nvlist()
2579 	/* create the DSL Crypto Key ZAP object */  in dsl_crypto_key_create_sync()