gss_krb5_aead_encrypt(9)

💅 gss_krb5_aead_encrypt(9) 💅

okay so bestie, welcome to the Kernel API Manual — yes it's a kernel manpage, yes we're gonna make it cute, and yes the facts are staying exactly where they are 🎀

---

✨ NAME ✨

gss_krb5_aead_encrypt — the girlboss that encrypts a wrap token using crypto/krb5 🦋

---

🌸 SYNOPSIS 🌸

u32 gss_krb5_aead_encrypt (struct krb5_ctx *kctx , u32 offset , struct xdr_buf *buf , struct page **pages );

like… that's the whole signature, no cap ✨

---

💖 ARGUMENTS 💖

• kctx — your Kerberos context, the main character of this whole operation 👑
• offset — the byte offset of the GSS token header in buf. literally where the header starts, don't @ me 💅
• buf — OUT: the send buffer. yes bestie, it's an output param 🫶
• pages — the plaintext payload pages (aka page cache data) 📄✨

---

🧚 DESCRIPTION 🧚

so the xdr_buf setup here mirrors the original per-enctype encrypt functions — same energy, same layout, iconic behavior preserved 😌

but here's the glow-up: the CBC-CTS encryption and the HMAC are replaced by a single AEAD operation going through the crypto/krb5 library 🔥 like, two jobs became one, and she ate 💅

Return values — the vibe check at the end:

• GSS_S_COMPLETE — encryption successful, slay 🎉
• GSS_S_FAILURE — encryption failed, and we are devastated 😭

---

🌈 SEE ALSO 🌈

• Kernel file ./net/sunrpc/auth_gss/gss_krb5_crypto.c — go read the source, iykyk 📖
• gss_krb5_aead_decrypt(9) — the reverse uno card 💀
• gss_krb5_mic_build_sg(9) — her bestie, the MIC builder 🫶

---

fr fr: if that return value comes back GSS_S_FAILURE, that's a hard fail, not a soft one — no vibes, just failure 💔

---

and that's the page, bestie 💜 this lil' gem lives in ./net/sunrpc/auth_gss, dated October 2026, and it's serving Kernel API Manual realness from start to finish ✨🎀🦋 periodt 💅