mirror of
https://git.mirrors.martin98.com/https://github.com/ceph/ceph-csi.git
synced 2025-07-31 06:52:03 +08:00

The new SecretsMetadataKMS provider encrypts/decrypts DEKs as they are stored in the metadata of volumes. The encryption/decryption uses golang.org/x/crypto/scrypt to generate the encryption key from a passphrase. While vendoring golang.org/x/crypto, already vendored sub-packages have been updated. Signed-off-by: Niels de Vos <ndevos@redhat.com>