Home
last modified time | relevance | path

Searched full:encryption (Results 1 – 25 of 1658) sorted by relevance

12345678910>>...67

/freebsd/sys/contrib/openzfs/tests/zfs-tests/tests/functional/cli_root/zfs_create/
H A Dzfs_create_encrypted.ksh26 # encryption properties set.
29 # enc = encryption
35 # no unspec 0 0 yes inherit no encryption (not tested here)
39 # no off 0 0 yes explicit no encryption
45 # no on 1 0 yes new encryption root
46 # no on 1 1 yes new encryption root
47 # yes unspec 0 0 yes inherit encryption
49 # yes unspec 1 0 yes new encryption root, crypt inherited
50 # yes unspec 1 1 yes new encryption root, crypt inherited
55 # yes on 0 0 yes inherited encryption, local crypt
[all …]
H A Dzfs_create_crypt_combos.ksh25 # 'zfs create' should create an encrypted dataset with a valid encryption
29 # 1. Create a filesystem for each combination of encryption type and key format
44 "encryption=on" \
45 "encryption=aes-128-ccm" \
46 "encryption=aes-192-ccm" \
47 "encryption=aes-256-ccm" \
48 "encryption=aes-128-gcm" \
49 "encryption=aes-192-gcm" \
50 "encryption=aes-256-gcm"
53 "encryption=aes-256-gcm" \
[all …]
/freebsd/sys/contrib/openzfs/tests/zfs-tests/tests/functional/rsend/
H A Dsend_encrypted_props.ksh22 # Verify that zfs properly handles encryption properties when receiving
29 # 4. Verify that 'zfs recv -x <encryption prop>' fails on a raw send stream
30 # 5. Verify that encryption properties cannot be changed on incrementals
31 # 6. Verify that a simple send can be received as an encryption root
33 # encryption root
35 # encryption root
37 # encryption child
39 # encryption child
55 log_assert "'zfs recv' must properly handle encryption properties"
69 log_must zfs create -o encryption=on -o keyformat=passphrase \
[all …]
/freebsd/sys/contrib/openzfs/man/man8/
H A Dzfs-unload-key.830 .Nd load, unload, or change encryption key of ZFS dataset
97 encryption roots.
99 Loads the keys for all encryption roots in all imported pools.
141 encryption roots.
143 Unloads the keys for all encryption roots in all imported pools.
170 If the dataset was not previously an encryption root it will become one.
173 flag may be provided to cause an encryption root to inherit the parent's key
203 Allows the user to set encryption key properties
215 Note that this command can only be run on an encryption root
219 .Ss Encryption
[all...]
H A Dzfs-change-key.830 .Nd load, unload, or change encryption key of ZFS dataset
97 encryption roots.
99 Loads the keys for all encryption roots in all imported pools.
141 encryption roots.
143 Unloads the keys for all encryption roots in all imported pools.
170 If the dataset was not previously an encryption root it will become one.
173 flag may be provided to cause an encryption root to inherit the parent's key
203 Allows the user to set encryption key properties
215 Note that this command can only be run on an encryption root
219 .Ss Encryption
[all...]
H A Dzfs-load-key.830 .Nd load, unload, or change encryption key of ZFS dataset
97 encryption roots.
99 Loads the keys for all encryption roots in all imported pools.
141 encryption roots.
143 Unloads the keys for all encryption roots in all imported pools.
170 If the dataset was not previously an encryption root it will become one.
173 flag may be provided to cause an encryption root to inherit the parent's key
203 Allows the user to set encryption key properties
215 Note that this command can only be run on an encryption root
219 .Ss Encryption
[all …]
/freebsd/sys/contrib/openzfs/tests/zfs-tests/tests/functional/cli_root/zpool_create/
H A Dzpool_create_crypt_combos.ksh24 # 'zpool create' should create encrypted pools when using a valid encryption
28 # 1. Create a pool for each combination of encryption type and key format
40 set -A ENCRYPTION_ALGS "encryption=on" \
41 "encryption=aes-128-ccm" \
42 "encryption=aes-192-ccm" \
43 "encryption=aes-256-ccm" \
44 "encryption=aes-128-gcm" \
45 "encryption=aes-192-gcm" \
46 "encryption=aes-256-gcm"
48 set -A ENCRYPTION_PROPS "encryption=aes-256-gcm" \
[all …]
H A Dzpool_create_encrypted.ksh24 # combination of encryption properties set.
26 # enc = encryption
39 # N 0 0 yes explicit no encryption
45 # Y 1 1 no unsupported combination of non-encryption props
46 # Y 1 0 yes new encryption root
47 # Y 1 1 yes new encryption root
50 # 1. Attempt to create a dataset using all combinations of encryption
63 "has a valid combination of encryption properties set."
70 log_must zpool create -O encryption=off $TESTPOOL $DISKS
73 log_mustnot zpool create -O encryption=off -O keylocation=prompt \
[all …]
/freebsd/crypto/krb5/src/windows/leash/htmlhelp/html/
H A DEncryption_Types.htm8 <h1>Encryption Types</h1>
10 Kerberos supports several types of encryption for securing session keys
15 Kerberos installation checks for an encryption type that is shared by
17 <li> When encrypting session keys, the KDC checks for an encryption
28 <li><a href="#view"> View encryption types</a></li>
33 <li><a href="#weak"> Weak encryption types</a></li>
34 <li><a href="#supported"> Supported encryption types</a></li>
42 <h2><a name="weak"> Weak Encryption Types </a></h2>
44 In the table of Encryption Types below, some encryption types are noted as <b>weak</b>.
45 Most of them are encryption types that used to be strong but now, with
[all …]
/freebsd/secure/lib/libcrypto/man/man7/
H A Dlife_cycle-cipher.789 .IP "initialised for encryption using EVP_EncryptInit" 4
90 .IX Item "initialised for encryption using EVP_EncryptInit"
131 | for decryption | | | | for encryption |
144 …| for decryption | <-------------------+ | | for encryption | …
155 | (AEAD encryption)
169 … decryption decryption encryption encryption
175 … encryption encryption encryption encryption encryption encryption encryption encryption
180 … encryption encryption
187 … decryption decryption encryption encryption
189 … decryption decryption encryption encryption
[all …]
/freebsd/contrib/bearssl/inc/
H A Dbearssl_block.h46 * functions are provided, for CBC encryption, CBC decryption, and CTR
47 * encryption/decryption. Each set has its own context structure,
48 * initialised with the encryption key.
50 * For CBC encryption and decryption, the data to encrypt or decrypt is
55 * Function for CTR encryption are defined only for block ciphers with
72 * expansion. These subkeys are appropriate for CBC encryption. The
78 * Perform key expansion: subkeys for CBC encryption are computed and
85 * Perform CBC encryption of `len` bytes, in place. The encrypted data
116 * expansion. These subkeys are appropriate for CTR encryption and
122 * Perform key expansion: subkeys for CTR encryption and decryption
[all …]
/freebsd/crypto/openssl/doc/man7/
H A Dlife_cycle-cipher.pod34 =item initialised for encryption using EVP_EncryptInit
82 | for decryption | | | | for encryption |
95 …| for decryption | <-------------------+ | | for encryption | …
106 | (AEAD encryption)
128 … decryption decryption encryption encryption
134 … encryption encryption encryption encryption encryption encryption encryption encryption
139 … encryption encryption
146 … decryption decryption encryption encryption
148 … decryption decryption encryption encryption
150 … decryption decryption encryption encryption
[all …]
/freebsd/sys/contrib/openzfs/tests/zfs-tests/tests/functional/cli_root/zfs_change-key/
H A Dzfs_change-key_clones.ksh23 # 'zfs change-key' should correctly update encryption roots with clones.
27 # 2. Create an encryption root child of the first dataset
28 # 3. Clone the child encryption root twice
29 # 4. Add inheriting children to the encryption root and each of the clones
30 # 5. Verify the encryption roots
31 # 6. Have the child encryption root inherit from its parent
32 # 7. Verify the encryption root for all datasets is now the parent dataset
45 log_assert "'zfs change-key' should correctly update encryption " \
48 log_must eval "echo $PASSPHRASE1 | zfs create -o encryption=on" \
50 log_must eval "echo $PASSPHRASE2 | zfs create -o encryption=on" \
[all …]
H A Dzfs_change-key_mismatch.ksh20 # match the encryption root it points at, rather than panic.
23 # 1. Create two encrypted datasets, each its own encryption root
29 # 6. Verify 'zfs change-key' on its encryption root fails
30 # 7. Verify the encryption root can be rekeyed once the dataset is gone
45 "does not match its encryption root"
47 log_must eval "echo $PASSPHRASE | zfs create -o encryption=on" \
49 log_must eval "echo $PASSPHRASE1 | zfs create -o encryption=on" \
76 "match its encryption root"
/freebsd/crypto/openssl/doc/man3/
H A DEVP_SealInit.pod5 EVP_SealInit, EVP_SealUpdate, EVP_SealFinal - EVP envelope encryption
21 encryption. They generate a random key and IV (if required) then
22 "envelope" it by using public key encryption. Data can then be
25 EVP_SealInit() initializes a cipher context B<ctx> for encryption
65 Envelope encryption is the usual method of using public key encryption
66 on large amounts of data, this is because public key encryption is slow
67 but symmetric encryption is fast. So symmetric encryption is used for
68 bulk encryption and the small random symmetric key used is transferred
69 using public key encryption.
/freebsd/sys/contrib/openzfs/tests/zfs-tests/tests/functional/cli_root/zfs_receive/
H A Dzfs_receive_-wR-encrypted-mix.ksh31 # 4. Check the encryption property of the received datasets
53 create_dataset "$src" -o encryption=on -o keyformat=passphrase
54 create_dataset "$src/u" "-o encryption=off"
56 create_dataset "$src/u/e" -o encryption=on -o keyformat=passphrase
57 create_dataset "$src/u/e/u" -o encryption=off
61 log_must test "$(get_prop 'encryption' $dst)" != "off"
62 log_must test "$(get_prop 'encryption' $dst/u)" == "off"
63 log_must test "$(get_prop 'encryption' $dst/u/e)" != "off"
64 log_must test "$(get_prop 'encryption' $dst/u/e/u)" == "off"
H A Dzfs_receive_to_encrypted.ksh32 # 8. Attempt to receive with -o encryption=off to an unencrypted child
63 log_must eval "echo $passphrase | zfs create -o encryption=on" \
68 log_must test "$(get_prop 'encryption' $TESTPOOL/$TESTFS1/c1)" != "off"
81 log_must test "$(get_prop 'encryption' $TESTPOOL/$TESTFS1/c2)" == "off"
89 zfs receive -o encryption=off $TESTPOOL/$TESTFS1/c2o"
90 log_must test "$(get_prop 'encryption' $TESTPOOL/$TESTFS1/c2o)" == "off"
94 log_must test "$(get_prop 'encryption' $TESTPOOL/$TESTFS1/c3)" == "off"
100 # Verify that replication can override encryption properties
101 log_note "Verifying replication can override encryption properties for plain dataset"
104 log_must eval "zfs send -R $snap2 | zfs recv -s -F -o encryption=on" \
[all …]
/freebsd/sys/contrib/openzfs/tests/zfs-tests/tests/functional/cli_root/zfs_rename/
H A Dzfs_rename_encrypted_child.ksh24 # encryption root.
27 # 1. Create two encryption roots, and a child and grandchild of the first
28 # encryption root
32 # 5. Verify the encryption root of the dataset
34 # 7. Verify the encryption root of the dataset
49 "encryption root"
51 log_must eval "echo $PASSPHRASE | zfs create -o encryption=on" \
55 log_must eval "echo $PASSPHRASE1 | zfs create -o encryption=on" \
75 "encryption root"
/freebsd/secure/lib/libcrypto/man/man3/
H A DEVP_SealInit.367 EVP_SealInit, EVP_SealUpdate, EVP_SealFinal \- EVP envelope encryption
83 encryption. They generate a random key and IV (if required) then
84 "envelope" it by using public key encryption. Data can then be
87 \&\fBEVP_SealInit()\fR initializes a cipher context \fBctx\fR for encryption
125 Envelope encryption is the usual method of using public key encryption
126 on large amounts of data, this is because public key encryption is slow
127 but symmetric encryption is fast. So symmetric encryption is used for
128 bulk encryption and the small random symmetric key used is transferred
129 using public key encryption.
H A DDES_random_key.375 DES_fcrypt, DES_crypt \- DES encryption
169 This library contains a fast implementation of the DES encryption
172 There are two phases to the use of DES encryption. The first is the
174 actual encryption. A DES key is of type \fIDES_cblock\fR. This type
177 the key; it is used to speed the encryption process.
205 \&\fBDES_ecb_encrypt()\fR is the basic DES encryption routine that encrypts or
217 three\-key Triple\-DES encryption in ECB mode. This involves encrypting
221 \&\fIks2\fR and \fIks3\fR are the same, it is equivalent to just encryption
225 encryption by using \fIks1\fR for the final encryption.
238 \&\fIoutw\fR to \*(Aqwhiten\*(Aq the encryption. \fIinw\fR and \fIoutw\fR are secret
[all …]
/freebsd/crypto/heimdal/doc/doxyout/krb5/man/man3/
H A Dkrb5_crypto.392 Enable or disable all weak encryption types
109 Return the coresponding encryption type for a checksum type.
117 \fIetype\fP The returned encryption, when the matching etype is not found, etype is set to ETYPE_NU…
222 \fIenctype\fP the encryption type of the resulting key
273 Return the encryption type used by the crypto context
281 \fIenctype\fP the resulting encryption type
311 Create a crypto context used for all encryption and signature operation. The encryption type to use…
321 \fIetype\fP the encryption type
386 Disable encryption type
392 \fIenctype\fP encryption type to disable
[all …]
/freebsd/sys/contrib/openzfs/tests/zfs-tests/tests/functional/cli_root/zfs_promote/
H A Dzfs_promote_encryptionroot.ksh23 # ZFS must promote clones of an encryption root.
27 # 2. Clone the encryption root
30 # 4. Verify the encryption root of all datasets is the origin
32 # 6. Verify the encryption root of all datasets is still the origin
33 # 7. Promote the dataset again, so it is now the encryption root
34 # 8. Verify the encryption root of all datasets is the promoted dataset
50 log_assert "ZFS must promote clones of an encryption root"
56 log_must eval "echo $passphrase | zfs create -o encryption=on" \
90 log_pass "ZFS promotes clones of an encryption root"
/freebsd/lib/libc/rpc/
H A Ddes_crypt.37 .Nd "fast DES encryption"
27 (Data Encryption Standard).
57 is the 8-byte encryption key with parity.
76 For the encryption direction
83 encryption,
91 is specified, and there is no hardware, then the encryption is performed
108 Encryption succeeded, but done in software instead of the requested hardware.
/freebsd/sys/net80211/
H A DDATAPATH_TRANSMIT.md27 how it interacts with 802.11 sequence numbering and encryption IV.
60 marked as needing encryption if required, and has been optionally
79 at the same time that the transmit encryption IV number is assigned,
121 * If the mbuf is marked as needing encryption (IEEE80211_FC1_PROTECTED
123 with the current encryption state via a call to ieee80211_crypto_encap().
126 Again it is critical that the 802.11 sequence number and encryption be
133 net80211 currently treats encryption key programming, VAP state
136 set the encryption keys and then queue a frame to be transmitted.
139 (such as the ath(4) devices) the encryption key and node programming
148 encryption key updates and buffer transmit frames for a node
[all …]
/freebsd/contrib/telnet/libtelnet/
H A Dkerberos.c84 #ifdef ENCRYPTION
88 #endif /* ENCRYPTION */
193 #ifdef ENCRYPTION in kerberos4_send()
218 #endif /* ENCRYPTION */ in kerberos4_send()
232 #ifdef ENCRYPTION in kerberos4_is()
235 #endif /* ENCRYPTION */ in kerberos4_is()
267 #ifdef ENCRYPTION in kerberos4_is()
269 #endif /* ENCRYPTION */ in kerberos4_is()
280 #ifndef ENCRYPTION in kerberos4_is()
282 #else /* ENCRYPTION */ in kerberos4_is()
[all …]

12345678910>>...67