Changes in Kconfig

9d5c0fff - nvme: add nvme_auth_derive_tls_psk()

Mon, 24 Feb 2025 12:38:12 +0000

nvme: add nvme_auth_derive_tls_psk()Add a function to derive the TLS PSK as specified TP8018.Signed-off-by: Hannes Reinecke Reviewed-by: Sagi Grimberg Signed-off-by: Keith Busch List of files: /linux-6.15/drivers/nvme/common/Kconfig

6affe08a - nvme: common: make keyring and auth separate modules

Thu, 26 Oct 2023 13:08:03 +0000

nvme: common: make keyring and auth separate modulesWhen only the keyring module is included but auth is not, modpostcomplains about the lack of a module license tag:ERROR: modpost: missing MODULE_LICENSE() in drivers/nvme/common/nvme-common.oAddress this by making both modules buildable standalone,removing the now unnecessary CONFIG_NVME_COMMON symbolin the process.Also, now that NVME_KEYRING config symbol can be either a module orbuilt-in, the stubs need to check for '#if IS_ENABLED' rather than asimple '#ifdef'.Fixes: 9d77eb5277849 ("nvme-keyring: register '.nvme' keyring")Signed-off-by: Arnd Bergmann Signed-off-by: Hannes Reinecke Signed-off-by: Christoph Hellwig Signed-off-by: Keith Busch List of files: /linux-6.15/drivers/nvme/common/Kconfig

d6800634 - nvme: rework NVME_AUTH Kconfig selection

Thu, 12 Oct 2023 12:22:48 +0000

nvme: rework NVME_AUTH Kconfig selectionHaving a single Kconfig symbol NVME_AUTH conflates the selectionof the authentication functions from nvme/common and nvme/host,causing kbuild robot to complain when building the nvme targetonly. So introduce a Kconfig symbol NVME_HOST_AUTH for the nvmehost bits and use NVME_AUTH for the common functions only.And move the CRYPTO selection into nvme/common to make iteasier to read.Reported-by: kernel test robot Closes: https://lore.kernel.org/oe-kbuild-all/202310120733.TlPOVeJm-lkp@intel.com/Signed-off-by: Hannes Reinecke Signed-off-by: Keith Busch List of files: /linux-6.15/drivers/nvme/common/Kconfig

9d77eb52 - nvme-keyring: register '.nvme' keyring

Thu, 24 Aug 2023 14:39:08 +0000

nvme-keyring: register '.nvme' keyringRegister a '.nvme' keyring to hold keys for TLS and DH-HMAC-CHAP andadd a new config option NVME_KEYRING.We need a separate keyring for NVMe as the configuration is donevia individual commands (eg for configfs), and the usual per-sessionor per-process keyrings can't be used.Signed-off-by: Hannes Reinecke Reviewed-by: Sagi Grimberg Signed-off-by: Keith Busch List of files: /linux-6.15/drivers/nvme/common/Kconfig

f50fff73 - nvme: implement In-Band authentication

Mon, 27 Jun 2022 09:52:02 +0000

nvme: implement In-Band authenticationImplement NVMe-oF In-Band authentication according to NVMe TPAR 8006.This patch adds two new fabric options 'dhchap_secret' to specify thepre-shared key (in ASCII respresentation according to NVMe 2.0 section8.13.5.8 'Secret representation') and 'dhchap_ctrl_secret' to specifythe pre-shared controller key for bi-directional authentication of boththe host and the controller.Re-authentication can be triggered by writing the PSK into the newcontroller sysfs attribute 'dhchap_secret' or 'dhchap_ctrl_secret'.Signed-off-by: Hannes Reinecke Reviewed-by: Sagi Grimberg Signed-off-by: Christoph Hellwig [axboe: fold in clang build fix]Signed-off-by: Jens Axboe List of files: /linux-6.15/drivers/nvme/common/Kconfig