fscrypt_new_context(9)

✨ NAME ✨

hiii bestie 💖 welcome to fscrypt_new_context(9) from the Kernel API Manual 🎀 — this one is literally about creating a new fscrypt_context, no cap.

---

🌸 SYNOPSIS 🌸

the way this function pulls up is lowkey iconic:

int fscrypt_new_context (union fscrypt_context *ctx_u , const union
       fscrypt_policy *policy_u , const u8 nonce[FSCRYPT_FILE_NONCE_SIZE] );

---

🦋 ARGUMENTS 🦋

• ctx_u — the output context 🫶 — like, this is where the new context goes.
• policy_u — the input policy ✨ — the encryption policy you're working with.
• nonce — the nonce to use 👀 — and the description has a whole rule about this one: it must be a new random nonce. not me catching you trying to reuse one 💅

---

💖 DESCRIPTION 💖

okay so this function creates an fscrypt_context for an inode that is being assigned the given encryption policy 🌈. that's the main character move.

and bestie, listen: nonce must be a new random nonce 🔥. like, fr fr, do not play with that. fresh random nonce only.

---

👑 RETURN 👑

it returns the size of the new context in bytes — that's the whole return vibe, periodt 💅✨.

---

🎀 SEE ALSO 🎀

peep the kernel file over at ./fs/crypto/policy.c 👀, plus these function besties:

• fscrypt_policies_equal(9)
• fscrypt_supported_policy(9)
• fscrypt_policy_from_context(9)
• fscrypt_has_permitted_context(9)
• fscrypt_context_for_new_inode(9)
• fscrypt_set_context(9)
• fscrypt_parse_test_dummy_encryption(9)
• fscrypt_dummy_policies_equal(9)
• fscrypt_show_test_dummy_encryption(9)

---

mwah 💋 this page's source/version is ./fs/crypto, and it's dated October 2026 — cute little sign-off, slay 🧚💜