[Consultation][Patches] IEC-62443-4-2 CR 4.1 Information Confidentiality

[Consultation][Patches] IEC-62443-4-2 CR 4.1 Information Confidentiality

[Djuned Djusdek]

[-- Attachment #1: Type: text/plain, Size: 2326 bytes --]

Hello CIP Core-WG and CIP Kernel-WG,
(CC CIP Security-WG).

Thank you for your help every time.
This is Djuned (CIP Security-WG) from Renesas,

To comply IEC-62443-4-2 CR 4.1 Information Confidentiality requirements for Data-at-rest,
CIP Security-WG performed analysis and decided to employ cryptsetup package.

To support and verify this package, we have discussion and report here:

  *   [CIP-Security] [CR4.1] Information confidentiality (Data encryption at rest) (#44) * Issues * cip-project / cip-security / iec_62443-4-x * GitLab<https://gitlab.com/cip-project/cip-security/iec_62443-4-x/-/issues/44>
  *   Supporting data encryption at rest for IEC-62443-4-2 CR 4.1 (#29) * Issues * cip-project / cip-core / isar-cip-core * GitLab<https://gitlab.com/cip-project/cip-core/isar-cip-core/-/issues/29>

Besides, we prepared series of patches:
<isar-cip-core>

  *   cip-core-image-security.bb: Add cryptsetup and fdisk packages (ec9f985f) * Commits * cip-project / cip-core / isar-cip-core * GitLab<https://gitlab.com/cip-project/cip-core/isar-cip-core/-/commit/ec9f985fd1cc26b6ee6d2e4b9952c4fbff91cc1f>
  *   start-qemu: Create and add secure-image.img as /dev/vdb for cip-core-image-security (d6eaf0d2) * Commits * cip-project / cip-core / isar-cip-core * GitLab<https://gitlab.com/cip-project/cip-core/isar-cip-core/-/commit/d6eaf0d216d10d1a873998961b3a88688027fb35>
  *   doc: Add README for IEC-62443-4-2 CR 4.1 Information Confidentiality (2de2aaa5) * Commits * cip-project / cip-core / isar-cip-core * GitLab<https://gitlab.com/cip-project/cip-core/isar-cip-core/-/commit/2de2aaa5331b2094137779c4375ff877394415c9>
<cip-kernel-config>

  *   5.10.y-cip/arm64: qemu_arm64_defconfig: Enable Crypto modules (40c4baf1) * Commits * cip-project / cip-kernel / cip-kernel-config * GitLab<https://gitlab.com/cip-project/cip-kernel/cip-kernel-config/-/commit/40c4baf1211cc3018fede298bd5def6dcf51ddee>

Now, we ask for your help to check/review our patches before we create Pull-Requests.
Thank you,

with Best Regards,

Djuned Fernando DJUSDEK (Mr.)
djunedfernando.djusdek.wz@renesas.com<mailto:djunedfernando.djusdek.wz@renesas.com>
Software Business Development Department
Enterprise Infrastructure Business Division
IoT and Infrastructure Business Unit
Renesas Electronics Corporation


[-- Attachment #2: Type: text/html, Size: 17828 bytes --]