hsskey

Documentation

Overview

Package hsskey provides functionality for generating a key for unlocking drives based on the following procedure:

1. Via BMC, read a 32-byte secret seed known as the Host Secret Seed (HSS) using the OpenBMC IPMI blob transfer protocol
2. Compute a password as follows: We get the deterministically computed 32-byte HDKF-SHA256 using: - salt: "SKM PROD_V2 ACCESS" (default) - hss: 32-byte HSS - device identity: strings formed by concatenating the assembly serial number, the _ character, and the assembly part number.

Index

• Constants
• func GenPassword(hss []byte, salt string, identifiers ...string) ([]byte, error)
• func GetAllHss(verbose bool, verboseDangerous bool) ([][]uint8, error)

Constants

const (
	DefaultPasswordSalt = "SKM PROD_V2 ACCESS"
)

Functions

func GenPassword

func GenPassword(hss []byte, salt string, identifiers ...string) ([]byte, error)

GenPassword computes the password deterministically as the 32-byte HDKF-SHA256 of the HSS plus the device identity.

func GetAllHss

func GetAllHss(verbose bool, verboseDangerous bool) ([][]uint8, error)

GetAllHss reads all host secret seeds over IPMI.