Lines Matching full:wrapped

105 Unless `hardware-wrapped keys`_ are used, an attacker who gains the
112 However, if hardware-wrapped keys are used, then the fscrypt master
164 However, if `hardware-wrapped keys`_ are used, such attackers will be
198 hardware-wrapped keys.  The use of hardware-wrapped keys modifies the
199 key hierarchy slightly.  For details, see `Hardware-wrapped keys`_.
277 Key derivation was chosen over key wrapping because wrapped keys would
283 the master keys may be wrapped in userspace, e.g. as is done by the
925     hardware-wrapped key.  See `Hardware-wrapped keys`_.  This flag
932   will contain a wrapped key, not a raw key.
956 - ``EBADMSG``: invalid hardware-wrapped key
968   had encryption enabled on it; or a hardware wrapped key was specified
970   does not support hardware-wrapped keys
1346 protected by a raw key rather than a hardware-wrapped key.)
1355 files that are protected by a hardware-wrapped key can only be
1358 more information about hardware-wrapped keys, see below.
1360 Hardware-wrapped keys
1363 fscrypt supports using *hardware-wrapped keys* when the inline
1365 memory in wrapped (encrypted) form; they can only be unwrapped
1373 Note that hardware-wrapped keys aren't specific to fscrypt; they are a
1375 hardware-wrapped keys, see the block layer documentation at
1378 the details of how fscrypt can use hardware-wrapped keys.
1380 fscrypt supports hardware-wrapped keys by allowing the fscrypt master
1381 keys to be hardware-wrapped keys as an alternative to raw keys.  To
1382 add a hardware-wrapped key with `FS_IOC_ADD_ENCRYPTION_KEY`_,
1386 applicable.  The key must be in ephemerally-wrapped form, not
1387 long-term wrapped form.
1389 Some limitations apply.  First, files protected by a hardware-wrapped
1393 currently the hardware-wrapped key support is only compatible with
1401 protected by a hardware-wrapped key, fscrypt uses blk-crypto,
1402 attaching the hardware-wrapped key to the bio crypt contexts.  As is
1405 hardware-wrapped key, the hardware doesn't program the given key
1416 key from a hardware-wrapped key, fscrypt asks the inline encryption
1418 the hardware-wrapped key.  fscrypt uses this "software secret" to key
1421 Note that this implies that the hardware-wrapped key feature only