PLUGGABLE CRYPTOGRAPHY

摘要

Mechanisms are provided for allowing pluggable encryption in an operating system. Modules such as proprietary cipher modules connect to a kernel cryptographic framework using cryptographic cipher adapters. Supported cryptographic ciphers as well as proprietary cryptographic ciphers can be used in a transparent manner during file system access, key management, and metadata maintenance operations. Proprietary cipher modules interact with the cryptographic cipher adapters as though the cryptographic cipher adapters are the kernel cryptographic framework. The kernel cryptographic framework interacts with the cryptographic cipher adapters as though the cryptographic cipher adapters are proprietary cipher modules.

主权项

1. A method comprising:
determining at a cryptographic framework that a kernel does not support an incompatible cryptographic cipher; sending a cipher lookup from the cryptographic framework to a cryptographic cipher adapter, the cryptographic cipher adapter configured to connect to the incompatible cryptographic cipher; and performing a cryptographic data transformation using the incompatible cryptographic cipher via the cipher adapter, wherein the incompatible cipher interacts with the cipher adapter as though the cipher adapter is the cryptographic framework.