nvme_auth_generate_psk(9)

💖 NAME 💖

okay so bestie, meet nvme_auth_generate_psk — this is the nvme_auth_generate_psk(9) page from the Kernel API Manual, and it is literally here to generate a PSK for TLS ✨

📜 SYNOPSIS 📜

int nvme_auth_generate_psk (u8 hmac_id , const u8 *skey , size_t
skey_len , const u8 *c1 , const u8 *c2 , size_t hash_len , u8 **ret_psk
, size_t *ret_len );

🎀 ARGUMENTS 🎀

• hmac_id — Hash function identifier 🔑
• skey — Session key 🗝️
• skey_len — Length of skey 📏
• c1 — Value of challenge C1 🎯
• c2 — Value of challenge C2 🎯
• hash_len — Hash length of the hash algorithm 🧮
• ret_psk — Pointer to the resulting generated PSK 🫶
• ret_len — length of ret_psk 📐

🌸 DESCRIPTION 🌸

okay so here’s the tea: this function generates a PSK for TLS as specified in the NVMe base specification, section 8.13.5.9: Generated PSK for TLS. iconic behavior, honestly 💅

The generated PSK for TLS shall be computed applying the HMAC function using the hash function H( ) selected by the HashID parameter in the DH-HMAC-CHAP_Challenge message with the session key KS as key to the concatenation of the two challenges C1 and C2 (i.e., generated PSK = HMAC(KS, C1 || C2)). 🧚✨

Returns 0 on success with a valid generated PSK pointer in ret_psk and the length of ret_psk in ret_len, or a negative error number otherwise. 💀

👑 SEE ALSO 👑

• Kernel file ./drivers/nvme/common/auth.c 📁
• nvme_auth_augmented_challenge(9)
• nvme_auth_gen_session_key(9)
• nvme_auth_generate_digest(9)
• nvme_auth_derive_tls_psk(9)

mwah 💋 — source/version ./drivers/nvme/common, October 2026, bestie 🫶