tree 9720402ab66d83dbd69844ffea60403e73756f26
parent 2b0f3d3df1fd3f71b57bb2ea581a649678b2451e
author Serge Bazanski <serge@monogon.tech> 1685018599 +0200
committer Serge Bazanski <serge@monogon.tech> 1685535921 +0000

m/n/core/localstorage/crypt: support more enc/auth modes

This is in preparation for introducing configurable disk
encryption/authentication policies in Metropolis (eg. low integrity
mode).

We also use the opportunity to add some tests for the newly refactored
crypt library. All modes go through an end-to-end test making sure data
is preserved and repeatedly mapping/unmapping the device works.

This change also disables insecure mode in debug builds. The equivalent
functionality will be re-established at a higher level in the cluster
code in a subsequent change, alongside the encryption/authentication
policy code.

Change-Id: I85db001c7c37a918cb491b1fcc3a51ea1d715817
Reviewed-on: https://review.monogon.dev/c/monogon/+/1724
Tested-by: Jenkins CI
Reviewed-by: Lorenz Brun <lorenz@monogon.tech>