zfs crypto discuss - Apr 2008 - [Bug 971] New: zfs key -l fails after unloading (keyscope=dataset)

http://defect.opensolaris.org/bz/show_bug.cgi?id=971

           Summary: zfs key -l fails after unloading (keyscope=dataset)
    Classification: Development
           Product: zfs-crypto
           Version: unspecified
          Platform: Other
        OS/Version: Solaris
            Status: NEW
          Severity: major
          Priority: P2
         Component: other
        AssignedTo: darrenm at opensolaris.org
        ReportedBy: ajscarp at yahoo.com
         QAContact: hua.tang at sun.com
                CC: zfs-crypto-discuss at opensolaris.org
   Estimated Hours: 0.0


After creating an encrypted dataset and then unloading the key, trying to
reload the key fails..

Below is all the debug info..  The salt and key are the same during creation
and load time..  An error that looks odd to me is the first kernel warning
saying that keylength of 32 was invalid.. it should be 32..


bash-3.2# zfs create -o encryption=on -o keysource=passphrase,prompt -o keyscop
e=dataset tank/enc
DEBUG: crypt = 0
DEBUG: keyscope = 0
DEBUG: keysource="passphrase,prompt"
Enter passphrase for ''tank/enc'': 
Enter again: 
salt==0
salt==3731736994759854399
outkey
(1081232)=b0d7586016db505e3ae4be3dc32f3f270a22f4ce17ef8d44336b4e1f4fabf14
zic_key (1081232)
bash-3.2# zfs key -u tank/enc 
salt= 0
keyscope= 0
keydatakeysourcedataset name=tank/enc
bash-3.2# zfs key -l tank/enc
Enter passphrase for ''tank/enc'': 
salt==3731736994759854399
salt==3731736994759854399
outkey
(1064848)=b0d7586016db505e3ae4be3dc32f3f270a22f4ce17ef8d44336b4e1f4fabf14
zic_key (1064848)
salt= 0
keyscope= 0
keydata=b0d7586016db505e3ae4be3dc32f3f270a22f4ce17ef8d44336b4e1f4fabf14
keysourcedataset name=tank/enc
Apr  3 11:38:07 cag-v240b zfs: WARNING: zio_crypt_key_from_ioc invalid
keylength 32
Apr  3 11:38:07 cag-v240b zfs: WARNING: dsl_crypto_key_load invalid key
Key error in ''tank/enc'': Key incorrect.

-- 
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://defect.opensolaris.org/bz/show_bug.cgi?id=971


Darren J Moffat <darrenm at opensolaris.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |INCOMPLETE




--- Comment #1 from Darren J Moffat <darrenm at opensolaris.org> 
2008-04-03 12:07:02 ---
I can''t reproduce this in my lastest bits but I don''t think
there are changes
in this that haven''t been pushed to the gate already that impact this:

da64-x4500b-gmp03# zfs create -o encryption=on -o keysource=passphrase,prompt
-o keyscope=dataset  tank/enc
DEBUG: crypt = 1
DEBUG: keyscope = 2
DEBUG: keysource="passphrase,prompt"
Enter passphrase for ''tank/enc'': 
Enter again: 
salt==0
salt==12621114793531966367
outkey (135397272)=6754eecdbdbae2fbf71a2336bad8c5b98a7fee0dd2dc4cfe59e8fe4e235a
zic_key (135397272)
da64-x4500b-gmp03# zfs key -u tank/enc
da64-x4500b-gmp03# zfs key -l tank/enc
Enter passphrase for ''tank/enc'': 
salt==12621114793531966367
salt==12621114793531966367
outkey (135389080)=6754eecdbdbae2fbf71a2336bad8c5b98a7fee0dd2dc4cfe59e8fe4e235a
zic_key (135389080)
salt= 0
keydata=6754eecdbdbae2fbf71a2336bad8c5b98a7fee0dd2dc4cfe59e8fe4e235a
keysourcedataset name=tank/enc
da64-x4500b-gmp03# df -hl
Filesystem             size   used  avail capacity  Mounted on
/dev/dsk/c5t0d0s0      6.3G   6.0G   192M    97%    /
/devices                 0K     0K     0K     0%    /devices
/dev                     0K     0K     0K     0%    /dev
ctfs                     0K     0K     0K     0%    /system/contract
proc                     0K     0K     0K     0%    /proc
mnttab                   0K     0K     0K     0%    /etc/mnttab
swap                    12G   1.0M    12G     1%    /etc/svc/volatile
objfs                    0K     0K     0K     0%    /system/object
sharefs                  0K     0K     0K     0%    /etc/dfs/sharetab
/usr/lib/libc/libc_hwcap2.so.1
                       6.3G   6.0G   192M    97%    /lib/libc.so.1
fd                       0K     0K     0K     0%    /dev/fd
swap                    12G    44K    12G     1%    /tmp
swap                    12G    44K    12G     1%    /var/run
tank                   457G    21K   457G     1%    /tank
tank/pp                457G   277K   457G     1%    /tank/pp
tank/enc               457G    18K   457G     1%    /tank/enc
da64-x4500b-gmp03# cp hamlet.txt /tank/enc
da64-x4500b-gmp03# sync
da64-x4500b-gmp03# head /tank/enc/hamlet.txt 
This Etext file is presented by Project Gutenberg, in
cooperation with World Library, Inc., from their Library of the
Future and Shakespeare CDROMS.  Project Gutenberg often releases
Etexts that are NOT placed in the Public Domain!!

*This Etext has certain copyright implications you should read!*

<<THIS ELECTRONIC VERSION OF THE COMPLETE WORKS OF WILLIAM
SHAKESPEARE IS COPYRIGHT 1990-1993 BY WORLD LIBRARY, INC., AND IS
PROVIDED BY PROJECT GUTENBERG WITH PERMISSION.  ELECTRONIC AND

-- 
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://defect.opensolaris.org/bz/show_bug.cgi?id=971





--- Comment #2 from ajscarp at yahoo.com  2008-04-03 21:17:56 ---
I think I may have been using some hybrid build or something.. once i
bfu''ed
again it went away..  I''ll close this if I don''t see it again
over the next few
days..

-- 
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://defect.opensolaris.org/bz/show_bug.cgi?id=971


ajscarp at yahoo.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|INCOMPLETE                  |CLOSED
         Resolution|                            |INVALID




--- Comment #3 from ajscarp at yahoo.com  2008-04-09 08:51:45 ---
haven''t seen this anymore

-- 
Configure bugmail: http://defect.opensolaris.org/bz/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.