5366997e79
- Replace `HEX` macro with inline function
- Replace `atoi` with `strtoul` and validate range of algorithm index
- Add back debug logging of SCSI traffic that got deleted a while ago
* Remove logging "additional sense bytes" since it was interpreting
the sense data wrong. Still print out the whole sense result in
debug mode.
- Fix some compiler warnings
* replace switch statement with if-else blocks since we don't use
all the enum values
Stenc
SCSI Tape Encryption Manager - Manages encryption on LTO tape drives (starting with generation 4) with hardware-based encryption. Program should work on any other SCSI security protocol (SSP) capable tape drives. Built specifically for Linux. Supports key change auditing and key descriptors (uKAD).
Features
- SCSI hardware-based encryption management
- Supports Linux
- Supports most SSP compliant devices, such as LTO-4 tape drives
- Key change audit logging
- AES Encryption
- Key Descriptor Management
Get the source code and compile
git clone git@github.com:scsitape/stenc.git
cd stenc/
autoreconf --install
./autogen.sh && ./configure
make check # optionally run the catch testing framework
make
Usage example
$ stenc -f /dev/nst0 --detail
Status for /dev/nst0
--------------------------------------------------
Device Mfg: TANDBERG
Product ID: LTO-6 HH
Product Revision: 3579
Drive Encryption: on
Drive Output: Decrypting
Unencrypted data not outputted
Drive Input: Encrypting
Protecting from raw read
Key Instance Counter: 1
Encryption Algorithm: 1
Drive Key Desc.(uKAD): mykey20170113
Linux Packages
Requirements
AIX support was suspended on 2022-05-08 until we have contributors who can develop and test the code on AIX.
License
Program copyright 2012-2022 contributing authors.
This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; version 2 of the License.
This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
Further reading
IBM Tape Library Guide for Open Systems ISBN-13: 9780738458342 http://www.redbooks.ibm.com/abstracts/sg245946.html?Open
SCSI-Programming-HOWTO https://tldp.org/HOWTO/archived/SCSI-Programming-HOWTO/SCSI-Programming-HOWTO-9.html