libnvme(9)

💅 libnvme(9) — struct nbft_security

okay bestie, buckle up — this is a page from the libnvme API manual (section 9), and it's all about one little struct. it's giving "niche but iconic" and honestly? we're obsessed. let's get into it ✨

---

🎀 NAME 🎀

struct nbft_security — the Security Profile Descriptor (Figure 23). yes, that's its whole government name. 💖

---

🌈 SYNOPSIS 🌈

here's the shape of it, bestie — every field, exactly as it lives:

struct nbft_security {
    __u8 structure_id;
    __u8 index;
    __le16 flags;
    __u8 secret_type;
    __u8 reserved1;
    struct nbft_heap_obj sec_chan_alg_obj;
    struct nbft_heap_obj auth_proto_obj;
    struct nbft_heap_obj cipher_suite_obj;
    struct nbft_heap_obj kx_grp_obj;
    struct nbft_heap_obj sec_hash_func_obj;
    struct nbft_heap_obj sec_keypath_obj;
    __u8 reserved2[22];
 };

look at her. twelve fields. main character energy fr fr 👑

---

🌸 Members 🌸

every member gets its moment, no skipping, no cap:

structure_id

Structure ID. this one shall be set to 5h — that's Security, aka #NBFT_DESC_SECURITY. it's the little name tag at the door. 🏷️

index

Security Profile Descriptor Index. this tells you which number this Security Profile Descriptor is in the Security Profile Descriptor List. like a seat number but for descriptors. 💅

flags

Security Profile Descriptor Flags — go peek at enum nbft_security_flags for the deets.

secret_type

Secret Type — the full tea is in enum nbft_security_secret_type.

reserved1

Reserved. nothing to see here, keep it moving bestie 🙈

sec_chan_alg_obj

Secure Channel Algorithm Heap Object Reference. okay so: if the Security Policy List field is set to 1h, then this field points at the location and size of a heap object holding a list of secure channel algorithms. that list is an array of bytes, and the values are defined in the Security Type (SECTYPE) field in the Transport Specific Address Subtype Definition in the NVMe TCP Transport Specification. but if the Security Policy List field is cleared to 0h, then this field is reserved. conditional queen 💅

auth_proto_obj

Authentication Protocols Heap Object Reference. if the Authentication Policy List field is set to 1h, this field gives you the location and size of a heap object containing a list of authentication protocol identifiers. if the Authentication Policy List field is cleared to 0h, this field is reserved. slay 🦋

cipher_suite_obj

Cipher Suite Offset Heap Object Reference. if the Cipher Suites Restricted by Policy bit is set to 1h, this field indicates the location and size of a heap object holding a list of cipher suite identifiers. that list (if there even is one) is an array of bytes, and the values are defined in the IANA TLS Parameters Registry. if the Cipher Suites Restricted by Policy bit is cleared to 0h, then this field is reserved. iykyk 🔥

kx_grp_obj

KX Groups Heap Object Reference. if the Authentication KX Groups Restricted by Policy List bit is set to 1h, this field indicates the location and size of a heap object containing a list of KX-HMAC-CHAP key exchange (KX) group identifiers. if the Authentication KX Groups Restricted by Policy List bit is cleared to 0h, then this field is reserved. 🎀

sec_hash_func_obj

Secure Hash Functions Offset Heap Object Reference. if the Secure Hash Functions Policy List bit is set to 1h, this field indicates the offset in bytes of a heap object containing a list of DH-HMAC-CHAP hash function identifiers. the list is an array of bytes, and the values are defined in the NVM Express Base Specification. if the Secure Hash Functions Policy List bit is cleared to 0h, then this field is reserved. ✨

sec_keypath_obj

Secret Keypath Offset Heap Object Reference. if this field is set to a non-zero value, then it indicates the location and size of a heap object containing a URI. the type of that URI is specified in the Secret Type field. if this field is cleared to 0h, then this field is reserved. it's giving "read the room (and the Secret Type field)" 😭

reserved2

Reserved. that's __u8 reserved2[22]; — twenty-two bytes of pure vibes and absolutely no information. respect. 💀

---

💜 reminder bestie: this page is about a struct definition from the libnvme API manual, section 9. the reserved fields are reserved — don't go poking them and then act surprised.

---

okay that's the whole page!! and before you go — the footer energy: this is struct nbft_security from libnvme(9), dated October 2026. now go forth and describe your security profiles with confidence, you absolute icon 🫶🦋⭐