linux-stable/include/linux/sunrpc
Chuck Lever a40cf7530d SUNRPC: Add gk5e definitions for RFC 8009 encryption types
Fill in entries in the supported_gss_krb5_enctypes array for the
encryption types defined in RFC 8009. These new enctypes use the
SHA-256 and SHA-384 message digest algorithms (as defined in
FIPS-180) instead of the deprecated SHA-1 algorithm, and are thus
more secure.

Note that NIST has scheduled SHA-1 for deprecation:

https://www.nist.gov/news-events/news/2022/12/nist-retires-sha-1-cryptographic-algorithm

Thus these new encryption types are placed under a separate CONFIG
option to enable distributors to separately introduce support for
the AES-SHA2 enctypes and deprecate support for the current set of
AES-SHA1 encryption types as their user space allows.

As this implementation is still a "beta", the default is to not
build it automatically.

Tested-by: Scott Mayhew <smayhew@redhat.com>
Reviewed-by: Simo Sorce <simo@redhat.com>
Signed-off-by: Chuck Lever <chuck.lever@oracle.com>
2023-02-20 09:20:43 -05:00
..
addr.h
auth.h
auth_gss.h
bc_xprt.h
cache.h
clnt.h SUNRPC: Add API to force the client to disconnect 2022-10-06 09:52:09 -04:00
debug.h
gss_api.h
gss_asn1.h
gss_err.h
gss_krb5.h SUNRPC: Add gk5e definitions for RFC 8009 encryption types 2023-02-20 09:20:43 -05:00
metrics.h
msg_prot.h SUNRPC: Convert svcauth_unix_accept() to use xdr_stream 2023-02-20 09:20:11 -05:00
rpc_pipe_fs.h SUNRPC: ensure the matching upcall is in-flight upon downcall 2022-12-15 18:13:53 -05:00
rpc_rdma.h
rpc_rdma_cid.h
sched.h NFS Client Updates for Linux 6.1 2022-10-13 09:58:42 -07:00
stats.h
svc.h SUNRPC: Replace pool stats with per-CPU variables 2023-02-20 09:20:32 -05:00
svc_rdma.h
svc_rdma_pcl.h
svc_xprt.h
svcauth.h
svcauth_gss.h
svcsock.h
timer.h
types.h
xdr.h SUNRPC: Push svcxdr_init_encode() into svc_process_common() 2023-02-20 09:20:27 -05:00
xprt.h
xprtmultipath.h
xprtrdma.h
xprtsock.h