From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id E6476C4332F for ; Sun, 5 Dec 2021 00:18:46 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S229512AbhLEAWM (ORCPT ); Sat, 4 Dec 2021 19:22:12 -0500 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:49962 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229772AbhLEAWL (ORCPT ); Sat, 4 Dec 2021 19:22:11 -0500 Received: from dfw.source.kernel.org (dfw.source.kernel.org [IPv6:2604:1380:4641:c500::1]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 2BC3AC061751; Sat, 4 Dec 2021 16:18:45 -0800 (PST) Received: from smtp.kernel.org (relay.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by dfw.source.kernel.org (Postfix) with ESMTPS id BD54960F56; Sun, 5 Dec 2021 00:18:44 +0000 (UTC) Received: by smtp.kernel.org (Postfix) with ESMTPSA id 6A368C341C2; Sun, 5 Dec 2021 00:18:43 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1638663524; bh=BfwN181/ucvPs+qqkXLqvD+Y0D/G/XS4t6OFMg7vhYw=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=I3VyEjpqmg+V6VXQzLH08lJ8nmsu2H0REv+FA4dSSnLpH/k0iHMMHbrIBL474eZdZ 7KX7/Pg/gCkBpjQFP5caYX/r5ZT0M1mp9agmcOvw/V7Doecv9pcXeLLYcklDoPYdcr eRhSAP6dvqtWUuGj4GDSuNub8Mvb+YmObA6Ax1QdPMIM3bdYyqNUEQpbUgrHMIC6RW vSBc1zTUU6oepW7FNuQvKgMKj4qbuhxVCOEMeDDHbS9+6lgdqYNT+5qfxNsBwwN9cK 4GS/oaMZCSDwZ38ezEQGoAvf8fP8URoqScyA75jWzOKGqZWTiYIbG8VKyLbhGjV8nd Ixf+ceB9BpKRQ== Date: Sun, 5 Dec 2021 02:18:40 +0200 From: Jarkko Sakkinen To: Ahmad Fatoum Cc: Horia =?utf-8?Q?Geant=C4=83?= , Aymen Sghaier , Herbert Xu , "David S. Miller" , kernel@pengutronix.de, David Gstir , Tim Harvey , James Bottomley , Mimi Zohar , David Howells , James Morris , Eric Biggers , "Serge E. Hallyn" , Udit Agarwal , Jan Luebbe , Richard Weinberger , Franck LENORMAND , Sumit Garg , linux-integrity@vger.kernel.org, keyrings@vger.kernel.org, linux-crypto@vger.kernel.org, linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org Subject: Re: [PATCH v4 4/5] crypto: caam - add in-kernel interface for blob generator Message-ID: References: <3ea6e5c37559eddfdc51f26c4dff0abbbc894839.1633946449.git-series.a.fatoum@pengutronix.de> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <3ea6e5c37559eddfdc51f26c4dff0abbbc894839.1633946449.git-series.a.fatoum@pengutronix.de> Precedence: bulk List-ID: X-Mailing-List: linux-crypto@vger.kernel.org On Mon, Oct 11, 2021 at 12:02:37PM +0200, Ahmad Fatoum wrote: > The CAAM can be used to protect user-defined data across system reboot: > > - When the system is fused and boots into secure state, the master > key is a unique never-disclosed device-specific key > - random key is encrypted by key derived from master key > - data is encrypted using the random key > - encrypted data and its encrypted random key are stored alongside > - This blob can now be safely stored in non-volatile memory > > On next power-on: > - blob is loaded into CAAM > - CAAM writes decrypted data either into memory or key register > > Add functions to realize encrypting and decrypting into memory alongside > the CAAM driver. > > They will be used in a later commit as a source for the trusted key > seal/unseal mechanism. > > Reviewed-by: David Gstir > Tested-By: Tim Harvey > Signed-off-by: Steffen Trumtrar > Signed-off-by: Ahmad Fatoum What is CAAM? This is missing. /Jarkko