blob: dd5c6e5fac601e572c3331aca100c09119023bd0 [file]
#! /bin/bash
# SPDX-License-Identifier: GPL-2.0
# Copyright 2022 Google LLC
#
# FS QA Test No. 901
#
# Verify the ciphertext for encryption policies that use the HW_WRAPPED_KEY and
# IV_INO_LBLK_32 flags and that use AES-256-XTS to encrypt file contents and
# AES-256-CTS-CBC to encrypt file names.
#
. ./common/preamble
_begin_fstest auto quick encrypt
# Import common functions.
. ./common/filter
. ./common/encrypt
# real QA test starts here
_supported_fs generic
# Hardware-wrapped keys require the inlinecrypt mount option.
_require_scratch_inlinecrypt
export MOUNT_OPTIONS="$MOUNT_OPTIONS -o inlinecrypt"
_verify_ciphertext_for_encryption_policy AES-256-XTS AES-256-CTS-CBC \
v2 iv_ino_lblk_32 hw_wrapped_key
# success, all done
status=0
exit