|
|
Log in / Subscribe / Register

KEYS: trusted: Add generic trusted keys framework

From:  Sumit Garg <sumit.garg-AT-linaro.org>
To:  keyrings-AT-vger.kernel.org, linux-integrity-AT-vger.kernel.org, linux-crypto-AT-vger.kernel.org, linux-security-module-AT-vger.kernel.org
Subject:  [RFC/RFT v3 0/3] KEYS: trusted: Add generic trusted keys framework
Date:  Tue, 6 Aug 2019 19:07:17 +0530
Message-ID:  <1565098640-12536-1-git-send-email-sumit.garg@linaro.org>
Cc:  dhowells-AT-redhat.com, herbert-AT-gondor.apana.org.au, davem-AT-davemloft.net, peterhuewe-AT-gmx.de, jgg-AT-ziepe.ca, jejb-AT-linux.ibm.com, jarkko.sakkinen-AT-linux.intel.com, arnd-AT-arndb.de, gregkh-AT-linuxfoundation.org, zohar-AT-linux.ibm.com, jmorris-AT-namei.org, serge-AT-hallyn.com, casey-AT-schaufler-ca.com, ard.biesheuvel-AT-linaro.org, daniel.thompson-AT-linaro.org, linux-kernel-AT-vger.kernel.org, tee-dev-AT-lists.linaro.org, Sumit Garg <sumit.garg-AT-linaro.org>
Archive-link:  Article

This patch-set is an outcome of discussion here [1].

I have tested this framework with trusted keys support provided via TEE
but I wasn't able to test it with a TPM device as I don't possess one. It
would be really helpful if others could test this patch-set using a TPM
device.

[1] https://www.mail-archive.com/linux-doc@vger.kernel.org/ms...

Changes in v3:

Move TPM2 trusted keys code to trusted keys subsystem.

Changes in v2:

Split trusted keys abstraction patch for ease of review.

Sumit Garg (3):
  KEYS: trusted: create trusted keys subsystem
  KEYS: trusted: move tpm2 trusted keys code
  KEYS: trusted: Add generic trusted keys framework

 crypto/asymmetric_keys/asym_tpm.c                  |   2 +-
 drivers/char/tpm/tpm-interface.c                   |  56 ---
 drivers/char/tpm/tpm.h                             | 224 ------------
 drivers/char/tpm/tpm2-cmd.c                        | 307 -----------------
 include/keys/trusted-type.h                        |  45 +++
 include/keys/{trusted.h => trusted_tpm.h}          |  42 +--
 include/linux/tpm.h                                | 264 +++++++++++++-
 security/keys/Makefile                             |   2 +-
 security/keys/trusted-keys/Makefile                |   8 +
 .../keys/{trusted.c => trusted-keys/trusted-tpm.c} | 363 ++++----------------
 security/keys/trusted-keys/trusted-tpm2.c          | 378 +++++++++++++++++++++
 security/keys/trusted-keys/trusted.c               | 343 +++++++++++++++++++
 12 files changed, 1109 insertions(+), 925 deletions(-)
 rename include/keys/{trusted.h => trusted_tpm.h} (72%)
 create mode 100644 security/keys/trusted-keys/Makefile
 rename security/keys/{trusted.c => trusted-keys/trusted-tpm.c} (76%)
 create mode 100644 security/keys/trusted-keys/trusted-tpm2.c
 create mode 100644 security/keys/trusted-keys/trusted.c

-- 
2.7.4



Copyright © 2019, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds