From 0ca347ebbd575fec6de6ffddd3b75299ff4aa5a8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=D0=BD=D0=B0=D0=B1=20autouploader?=
First, the wrapping key is extracted from the "primary" - device as normal during +
First, the wrapping key is extracted as normally during
zfs-fido2-load-key(8),
then a credential is made as-if during
zfs-fido2-change-key(8)
- (except the "primary" device is excluded from the search);
- however, the ‘hmac-secret
’ is instead
- used as a symmetric AES-256-GCM
+ (except the "primary" device and all the ones holding backups are
+ excluded from the search); however, the
+ ‘hmac-secret
’ is instead used as a
+ symmetric AES-256-GCM
(EVP_CIPHER-AES(7ssl))
key to encrypt the wrapping key directly with a random IV.
This turns the