Add support for systemd-fido2 libcryptsetup plugin.
authorOndrej Kozina <okozina@redhat.com>
Mon, 17 May 2021 13:26:14 +0000 (15:26 +0200)
committerOndrej Kozina <okozina@redhat.com>
Thu, 19 Aug 2021 11:58:10 +0000 (13:58 +0200)
commit351716e11166bb4b703cc85f5f7c2f18b7e91e08
tree06295d423cfc6924e0702796433852ef08c33f6e
parent12f76c3b38aaebc993d246d42bcb46689b5adaea
Add support for systemd-fido2 libcryptsetup plugin.

Add support for systemd-fido2 based LUKS2 device activation
via libcryptsetup plugin. This make the feature (fido2 sealed
LUKS2 keyslot passphrase) usable from both systemd utilities
and cryptsetup cli.

The feature is configured via -Dlibcryptsetup-plugins combo
with default value set to 'auto'. It get's enabled automatically
when cryptsetup 2.4.0 or later is installed in build system.
meson.build
src/cryptsetup/cryptsetup-tokens/cryptsetup-token-systemd-fido2.c [new file with mode: 0644]
src/cryptsetup/cryptsetup-tokens/cryptsetup-token-util.h
src/cryptsetup/cryptsetup-tokens/cryptsetup-token.h
src/cryptsetup/cryptsetup-tokens/cryptsetup-token.sym
src/cryptsetup/cryptsetup-tokens/luks2-fido2.c [new file with mode: 0644]
src/cryptsetup/cryptsetup-tokens/luks2-fido2.h [new file with mode: 0644]
src/cryptsetup/cryptsetup-tokens/meson.build
src/cryptsetup/cryptsetup.c