Re: [RFC][PATCH v3 3/6] encrypted-keys: add key format support

David Howells
2011-01-26T11:03:29Z

Roberto Sassu <roberto.sassu@polito.it> wrote:

> This patch introduces a new parameter, called 'format', that defines the
> format of data stored by encrypted keys. The 'default' format identifies
> encrypted keys containing only the symmetric key, while other formats can
> be defined to support additional information. The 'format' parameter is
> written in the datablob produced by commands 'keyctl print' or
> 'keyctl pipe' and is integrity protected by the HMAC.

Would it make more sense to take key=val pairs where you have the <format>
parameter? Then you could have a format=default|foo|whatever argument and
you'd leave room for future addition of qualifiers.

David