All of lore.kernel.org
 help / color / mirror / Atom feed
* [PATCH 0/8 V2] Replay Protected Memory Block (RPMB) subsystem
@ 2016-04-04 11:11 Tomas Winkler
  2016-04-04 11:11 ` [PATCH v2 1/8] rpmb: add " Tomas Winkler
                   ` (7 more replies)
  0 siblings, 8 replies; 32+ messages in thread
From: Tomas Winkler @ 2016-04-04 11:11 UTC (permalink / raw)
  To: gregkh, Ulf Hansson, Adrian Hunter, James Bottomley,
	Martin K. Petersen, Vinayak Holikatti, Andy Lutomirski
  Cc: Christoph Hellwig, Yaniv Gardi, Joao Pinto, linux-mmc,
	linux-scsi, linux-kernel, Tomas Winkler

Few storage technology such is EMMC, UFS, and NVMe support RPMB
hardware partition with common protocol and frame layout.
The RPMB partition cannot be accessed via standard block layer, but
by a set of specific commands: WRITE, READ, GET_WRITE_COUNTER, and
PROGRAM_KEY.
Such a partition provides authenticated and replay protected access,
hence suitable as a secure storage.

A storage device registers its RPMB hardware (emmc) partition or
RPMB W-LUN (ufs) with the RPMB layer providing an implementation for
send_rpmb_req() handler.
Tere is as well simulation platform device. This is handy as an RPMB
key can be programmed only once at storage device lifetime.


ThePMB layer aims to provide in-kernel API for Trusted Execution
Environment (TEE) devices that are capable to securely compute block
frame signature. In case a TEE device wish to store a replay protected
data, it creates an RPMB frame with requested data and computes HMAC of
the frame, then it requests the storage device via RPMB layer to store
the data.
A TEE driver can claim rpmb interface, for example,
via  class_interface_register ().

A parallel user space API is provided via /dev/rpmbX character
device with a single IOCTL command similar to the one provided by
mmc/ioctl. h
There is a sample tool under tools/rpmb/ directory that exercises
this interface.

Tomas Winkler (8):
  rpmb: add Replay Protected Memory Block (RPMB) subsystem
  char: rpmb: add sysfs-class ABI documentation
  char: rpmb: add device attributes
  char: rpmb: provide user space interface
  char: rpmb: add RPMB simulation device
  tools rpmb: add RPBM access tool
  mmc: block: register rpmb partition with the RPMB subsystem
  scsi: ufs: connect to RPMB subsystem

 Documentation/ABI/testing/sysfs-class-rpmb |  39 ++
 Documentation/ioctl/ioctl-number.txt       |   1 +
 MAINTAINERS                                |  10 +
 drivers/char/Kconfig                       |   2 +
 drivers/char/Makefile                      |   1 +
 drivers/char/rpmb/Kconfig                  |  25 +
 drivers/char/rpmb/Makefile                 |   6 +
 drivers/char/rpmb/cdev.c                   | 209 ++++++++
 drivers/char/rpmb/core.c                   | 408 +++++++++++++++
 drivers/char/rpmb/rpmb-cdev.h              |  31 ++
 drivers/char/rpmb/rpmb_sim.c               | 584 +++++++++++++++++++++
 drivers/mmc/card/block.c                   | 289 +++++++++++
 drivers/scsi/ufs/ufshcd.c                  | 219 ++++++++
 drivers/scsi/ufs/ufshcd.h                  |   2 +
 include/linux/rpmb.h                       | 138 +++++
 include/uapi/linux/rpmb.h                  | 120 +++++
 tools/Makefile                             |  16 +-
 tools/rpmb/.gitignore                      |   2 +
 tools/rpmb/Makefile                        |  32 ++
 tools/rpmb/rpmb.c                          | 807 +++++++++++++++++++++++++++++
 20 files changed, 2936 insertions(+), 5 deletions(-)
 create mode 100644 Documentation/ABI/testing/sysfs-class-rpmb
 create mode 100644 drivers/char/rpmb/Kconfig
 create mode 100644 drivers/char/rpmb/Makefile
 create mode 100644 drivers/char/rpmb/cdev.c
 create mode 100644 drivers/char/rpmb/core.c
 create mode 100644 drivers/char/rpmb/rpmb-cdev.h
 create mode 100644 drivers/char/rpmb/rpmb_sim.c
 create mode 100644 include/linux/rpmb.h
 create mode 100644 include/uapi/linux/rpmb.h
 create mode 100644 tools/rpmb/.gitignore
 create mode 100644 tools/rpmb/Makefile
 create mode 100644 tools/rpmb/rpmb.c

-- 
2.4.3

^ permalink raw reply	[flat|nested] 32+ messages in thread

end of thread, other threads:[~2016-04-11 13:33 UTC | newest]

Thread overview: 32+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2016-04-04 11:11 [PATCH 0/8 V2] Replay Protected Memory Block (RPMB) subsystem Tomas Winkler
2016-04-04 11:11 ` [PATCH v2 1/8] rpmb: add " Tomas Winkler
2016-04-04 11:11 ` [PATCH v2 2/8] char: rpmb: add sysfs-class ABI documentation Tomas Winkler
2016-04-04 11:11 ` [PATCH v2 3/8] char: rpmb: add device attributes Tomas Winkler
2016-04-04 11:11 ` [PATCH v2 4/8] char: rpmb: provide user space interface Tomas Winkler
2016-04-04 11:11 ` [PATCH v2 5/8] char: rpmb: add RPMB simulation device Tomas Winkler
2016-04-04 11:11 ` [PATCH v2 6/8] tools rpmb: add RPBM access tool Tomas Winkler
2016-04-05 12:16   ` kbuild test robot
2016-04-05 12:16     ` kbuild test robot
2016-04-11 10:50     ` Winkler, Tomas
2016-04-11 10:50       ` Winkler, Tomas
2016-04-05 12:29   ` kbuild test robot
2016-04-05 12:29     ` kbuild test robot
2016-04-05 12:31   ` kbuild test robot
2016-04-05 12:31     ` kbuild test robot
2016-04-11 13:33   ` Josh Poimboeuf
2016-04-04 11:11 ` [PATCH v2 7/8] mmc: block: register rpmb partition with the RPMB subsystem Tomas Winkler
2016-04-04 11:11 ` [PATCH v2 8/8] scsi: ufs: connect to " Tomas Winkler
2016-04-06  8:51   ` Joao Pinto
2016-04-06  8:51     ` Joao Pinto
2016-04-07 21:15     ` Winkler, Tomas
2016-04-07 21:15       ` Winkler, Tomas
2016-04-08  9:24       ` Joao Pinto
2016-04-08  9:24         ` Joao Pinto
2016-04-08 11:17       ` Joao Pinto
2016-04-08 11:17         ` Joao Pinto
2016-04-08 11:21       ` Joao Pinto
2016-04-08 11:21         ` Joao Pinto
2016-04-08 17:29       ` Joao Pinto
2016-04-08 17:29         ` Joao Pinto
2016-04-08 20:33         ` Winkler, Tomas
2016-04-08 20:33           ` Winkler, Tomas

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.