Daniel Rosenberg edc440e3d2 fscrypt: improve format of no-key names ... When an encrypted directory is listed without the key, the filesystem must show "no-key names" that uniquely identify directory entries, are at most 255 (NAME_MAX) bytes long, and don't contain '/' or '\0'. Currently, for short names the no-key name is the base64 encoding of the ciphertext filename, while for long names it's the base64 encoding of the ciphertext filename's dirhash and second-to-last 16-byte block. This format has the following problems: - Since it doesn't always include the dirhash, it's incompatible with directories that will use a secret-keyed dirhash over the plaintext filenames. In this case, the dirhash won't be computable from the ciphertext name without the key, so it instead must be retrieved from the directory entry and always included in the no-key name. Casefolded encrypted directories will use this type of dirhash. - It's ambiguous: it's possible to craft two filenames that map to the same no-key name, since the method used to abbreviate long filenames doesn't use a proper cryptographic hash function. Solve both these problems by switching to a new no-key name format that is the base64 encoding of a variable-length structure that contains the dirhash, up to 149 bytes of the ciphertext filename, and (if any bytes remain) the SHA-256 of the remaining bytes of the ciphertext filename. This ensures that each no-key name contains everything needed to find the directory entry again, contains only legal characters, doesn't exceed NAME_MAX, is unambiguous unless there's a SHA-256 collision, and that we only take the performance hit of SHA-256 on very long filenames. Note: this change does *not* address the existing issue where users can modify the 'dirhash' part of a no-key name and the filesystem may still accept the name. Signed-off-by: Daniel Rosenberg <drosen@google.com> [EB: improved comments and commit message, fixed checking return value of base64_decode(), check for SHA-256 error, continue to set disk_name for short names to keep matching simpler, and many other cleanups] Link: https://lore.kernel.org/r/20200120223201.241390-7-ebiggers@kernel.org Signed-off-by: Eric Biggers <ebiggers@google.com>		2020-01-22 14:50:03 -08:00
..
ABI	platform/mellanox: fix the mlx-bootctl sysfs	2019-12-20 19:00:50 +02:00
accounting	docs: add some documentation dirs to the driver-api book	2019-07-15 11:03:02 -03:00
admin-guide	Fixes for 5.5:	2019-12-22 10:59:06 -08:00
arm	ARM: at91: Documentation: update the sama5d3 and armv7m datasheets	2019-09-30 21:39:18 +02:00
arm64	arm64 updates for 5.5:	2019-11-25 15:39:19 -08:00
block	block: add iostat counters for flush requests	2019-11-21 09:06:47 -07:00
bpf	bpf: Add s390 testing documentation	2019-10-30 16:25:31 +01:00
cdrom	docs: add some directories to the main documentation index	2019-07-15 11:03:03 -03:00
core-api	powerpc updates for 5.5 #2	2019-12-06 13:36:31 -08:00
cpu-freq	Documentation: cpufreq: Update policy notifier documentation	2019-09-02 22:44:05 +02:00
crypto	crypto: ablkcipher - remove deprecated and unused ablkcipher support	2019-11-17 09:02:49 +08:00
dev-tools	kunit: Rename 'kunitconfig' to '.kunitconfig'	2019-12-23 10:52:41 -07:00
devicetree	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2019-12-22 09:54:33 -08:00
doc-guide	kernel-doc: rename the kernel-doc directive 'functions' to 'identifiers'	2019-11-07 13:17:25 -07:00
driver-api	Merge branch 'thermal/next' of git://git.kernel.org/pub/scm/linux/kernel/git/thermal/linux	2019-12-05 11:21:24 -08:00
EDID	docs: driver-api: add a series of orphaned documents	2019-07-15 11:03:02 -03:00
fault-injection	docs: add some directories to the main documentation index	2019-07-15 11:03:03 -03:00
fb	docs conversion for v5.3-rc1	2019-07-16 12:21:41 -07:00
features	xtensa: update arch features	2019-10-20 23:48:28 -07:00
filesystems	fscrypt: improve format of no-key names	2020-01-22 14:50:03 -08:00
firmware-guide	ACPI: Documentation: Minor spelling fix in namespace.rst	2019-10-14 11:03:44 +02:00
firmware_class
fpga	Documentation: fpga: dfl: add descriptions for thermal/power management interfaces	2019-10-16 19:18:26 -07:00
gpu	drm/amdgpu: Improve RAS documentation (v2)	2019-11-06 16:27:48 -05:00
hid	docs: add some documentation dirs to the driver-api book	2019-07-15 11:03:02 -03:00
hwmon	Here's the main documentation changes for 5.5:	2019-12-02 11:51:02 -08:00
i2c	Here's the main documentation changes for 5.5:	2019-12-02 11:51:02 -08:00
ia64	docs: add SPDX tags to new index files	2019-07-15 11:03:03 -03:00
ide	docs: add some directories to the main documentation index	2019-07-15 11:03:03 -03:00
iio	docs: add some documentation dirs to the driver-api book	2019-07-15 11:03:02 -03:00
infiniband	Documentation/infiniband: update name of some functions	2019-09-13 16:55:55 -03:00
input	Input: docs: fix spelling mistake "potocol" -> "protocol"	2019-08-06 11:24:49 -06:00
isdn	docs: isdn: convert to ReST and add to kAPI bookset	2019-07-31 13:30:25 -06:00
kbuild	kbuild: clarify the difference between obj-y and obj-m w.r.t. descending	2019-12-22 00:25:35 +09:00
kernel-hacking	docs: Add documentation for Symbol Namespaces	2019-09-10 10:30:49 +02:00
leds	leds: core: Add support for composing LED class device names	2019-07-25 20:07:52 +02:00
livepatch	livepatch: Documentation of the new API for tracking system state changes	2019-11-01 13:08:24 +01:00
locking	doc🔒 remove reference to clever use of read-write lock	2019-09-14 01:53:27 -06:00
m68k	docs: README.buddha: convert to ReST and add to m68k book	2019-07-31 13:30:10 -06:00
maintainer	docs: fix up the maintainer profile document	2019-11-25 08:42:12 -07:00
media	media: Documentation: media: *_DEFAULT targets for subdevs	2019-11-10 17:49:27 +01:00
mic	docs: driver-api: add remaining converted dirs to it	2019-07-15 11:03:03 -03:00
mips	docs: fix some broken references	2019-10-10 11:25:39 -06:00
misc-devices	docs: misc: xilinx_sdfec: Actually add documentation	2019-10-11 10:01:27 -06:00
netlabel	docs: add some directories to the main documentation index	2019-07-15 11:03:03 -03:00
networking	linux-can-fixes-for-5.5-20191208	2019-12-09 09:27:47 -08:00
nios2	docs: nios2: add it to the main Documentation body	2019-07-31 13:31:51 -06:00
nvdimm	libnvdimm, MAINTAINERS: Maintainer Entry Profile	2019-11-25 08:34:54 -07:00
openrisc	docs: openrisc: convert to ReST and add to documentation body	2019-07-31 13:30:20 -06:00
parisc	docs: parisc: convert to ReST and add to documentation body	2019-07-31 13:30:15 -06:00
PCI	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2019-08-27 14:23:31 -07:00
pcmcia	docs: add some directories to the main documentation index	2019-07-15 11:03:03 -03:00
power	pci-v5.5-changes	2019-12-03 13:58:22 -08:00
powerpc	powerpc/fsl_booke/32: Document KASLR implementation	2019-11-13 19:27:58 +11:00
process	treewide: Use sizeof_field() macro	2019-12-09 10:36:44 -08:00
RCU	Documentation: Rename rcu_node_context_switch() to rcu_note_context_switch()	2019-10-29 02:48:29 -07:00
riscv	riscv-docs: correct the sequence of the magic number 2 since it's little endian	2019-10-03 10:51:42 -06:00
s390	Documentation/s390: remove outdated debugging390 documentation	2019-08-21 12:41:43 +02:00
scheduler	Documentation/scheduler: fix links in sched-stats	2019-10-29 04:35:41 -06:00
scsi	scsi: smartpqi: Update attribute name to driver_version	2019-12-09 19:17:36 -05:00
security	Documentation: security: core.rst: fix warnings	2019-11-22 10:01:47 -07:00
sh	docs: remove extra conf.py files	2019-07-17 06:57:52 -03:00
sound	ALSA: docs: Update about the new PCM sync_stop ops	2019-11-20 19:39:54 +01:00
sparc	docs: add arch doc directories to the index	2019-07-15 11:03:01 -03:00
sphinx	docs, parallelism: Rearrange how jobserver reservations are made	2019-11-22 10:35:18 -07:00
sphinx-static	doc-rst: Reduce CSS padding around Field	2019-10-02 10:03:06 -06:00
spi	spi: docs: convert to ReST and add it to the kABI bookset	2019-07-31 14:13:13 -06:00
target	docs: add some directories to the main documentation index	2019-07-15 11:03:03 -03:00
timers	docs: add some directories to the main documentation index	2019-07-15 11:03:03 -03:00
trace	Here's the main documentation changes for 5.5:	2019-12-02 11:51:02 -08:00
translations	treewide: Use sizeof_field() macro	2019-12-09 10:36:44 -08:00
usb	USB: rio500: Remove Rio 500 kernel driver	2019-10-04 10:53:36 +02:00
userspace-api	Here's the main documentation changes for 5.5:	2019-12-02 11:51:02 -08:00
virt	KVM: Add support for secure guests under the Protected Execution	2019-11-29 19:20:08 +01:00
virtual	cpuidle: add haltpoll governor	2019-07-30 17:27:37 +02:00
vm	mm/hmm: remove hmm_mirror and related	2019-11-23 19:56:45 -04:00
w1	docs: w1: Fix SPDX-License-Identifier syntax	2019-10-18 09:45:56 -06:00
watchdog	linux-watchdog 5.4-rc1 tag	2019-09-27 11:17:38 -07:00
x86	Merge branch 'x86-boot-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2019-11-26 08:40:20 -08:00
xtensa	docs: add arch doc directories to the index	2019-07-15 11:03:01 -03:00
.gitignore
asm-annotations.rst	x86/ftrace: Get rid of function_hook	2019-10-25 10:52:22 +02:00
atomic_bitops.txt
atomic_t.txt	Merge branch 'locking-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2019-07-08 16:12:03 -07:00
bus-virt-phys-mapping.txt
Changes
CodingStyle
conf.py	doc-rst: Programmatically render MAINTAINERS into ReST	2019-10-02 10:03:17 -06:00
COPYING-logo	docs: logo.txt: rename it to COPYING-logo	2019-07-15 09:20:27 -03:00
crc32.txt
debugging-modules.txt
debugging-via-ohci1394.txt
digsig.txt
DMA-API-HOWTO.txt	docs: DMA-API-HOWTO.txt: fix an unmarked code block	2019-07-15 09:20:24 -03:00
DMA-API.txt	dma-mapping: remove dma_release_declared_memory	2019-09-04 11:13:19 +02:00
DMA-attributes.txt	dma-mapping: remove the DMA_ATTR_WRITE_BARRIER flag	2019-11-14 12:01:54 -04:00
DMA-ISA-LPC.txt
docutils.conf	doc-rst: Add missing newline at end of file	2019-06-20 14:16:56 -06:00
dontdiff	modpost: dump missing namespaces into a single modules.nsdeps file	2019-11-11 20:10:01 +09:00
futex-requeue-pi.txt
hwspinlock.txt	hwspinlock: add the 'in_atomic' API	2019-06-29 21:08:14 -07:00
index.rst	Here's the main documentation changes for 5.5:	2019-12-02 11:51:02 -08:00
io-mapping.txt
io_ordering.txt
IPMI.txt
IRQ-affinity.txt
IRQ-domain.txt
IRQ.txt
irqflags-tracing.txt
Kconfig	docs: Kbuild/Makefile: allow check for missing docs at build time	2019-06-07 11:33:16 -06:00
kobject.txt
kprobes.txt
kref.txt
logo.gif
lzo.txt
mailbox.txt
Makefile	Kbuild updates for v5.5	2019-12-02 17:35:04 -08:00
memory-barriers.txt	docs/memory-barriers.txt: Remove remaining references to mmiowb()	2019-11-22 10:00:46 -07:00
nommu-mmap.txt
padata.txt	padata: allocate workqueue internally	2019-09-13 21:15:39 +10:00
percpu-rw-semaphore.txt
pi-futex.txt	docs: locking: convert docs to ReST and rename to *.rst	2019-07-15 08:53:27 -03:00
preempt-locking.txt
rbtree.txt	docs: rbtree.txt: fix Sphinx build warnings	2019-07-15 09:20:24 -03:00
remoteproc.txt	remoteproc: add vendor resources handling	2019-06-29 12:02:17 -07:00
robust-futex-ABI.txt
robust-futexes.txt
rpmsg.txt
speculation.txt
static-keys.txt
SubmittingPatches
tee.txt	Documentation: tee: Grammar s/the its/its/	2019-06-07 11:23:38 -06:00
this_cpu_ops.txt
unaligned-memory-access.txt
xz.txt