Luca Boccassi
98ae19d9fe
Currently the only supported integrity algorithm using HMAC is `hmac-sha256`. Add `hmac-sha512` to the list of supported algorithms as well. Also add the `PHMAC` integrity algorithm to the list of supported algorithms. The `PHMAC` algorithm is like the regular HMAC algorithm, but it takes a wrapped key as input. A key for the `PHMAC` algorithm is an opaque key blob, who's physical size has nothing to do with the cryptographic size. Such a wrapped key can for example be a HSM protected key. Currently PHMAC is only available for the s390x architecture (Linux on IBM Z). Support for PHMAC has just been added to the cryptsetup project via MR https://gitlab.com/cryptsetup/cryptsetup/-/merge_requests/693 by commit https://gitlab.com/cryptsetup/cryptsetup/-/commit/296eb39c60bd85228930caaea4bb1d2a766b7544 To allow automatic opening of integrity protected volumes that use PHMAC via `/etc/integritytab`, this change in systemd's integritysetup tool is needed as well.
System and Service Manager
Details
Most documentation is available on systemd's web site.
Assorted, older, general information about systemd can be found in the systemd Wiki.
Information about build requirements is provided in the README file.
Consult our NEWS file for information about what's new in the most recent systemd versions.
Please see the Code Map for information about this repository's layout and content.
Please see the Hacking guide for information on how to hack on systemd and test your modifications.
Please see our Contribution Guidelines for more information about filing GitHub Issues and posting GitHub Pull Requests.
When preparing patches for systemd, please follow our Coding Style Guidelines.
If you are looking for support, please contact our mailing list, join our IRC channel #systemd on libera.chat or Matrix channel
Stable branches with backported patches are available in the stable repo.
We have a security bug bounty program sponsored by the Sovereign Tech Fund hosted on YesWeHack
Repositories with distribution packages built from git main are available on OBS