From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752027AbbLMPmm (ORCPT ); Sun, 13 Dec 2015 10:42:42 -0500 Received: from mga14.intel.com ([192.55.52.115]:23379 "EHLO mga14.intel.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751904AbbLMPmj (ORCPT ); Sun, 13 Dec 2015 10:42:39 -0500 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.20,422,1444719600"; d="scan'208";a="872714795" From: Jarkko Sakkinen To: Peter Huewe , Marcel Selhorst , David Howells , Mimi Zohar , Jonathan Corbet Cc: Jarkko Sakkinen , James Morris , Jason Gunthorpe , keyrings@vger.kernel.org (open list:KEYS-ENCRYPTED), linux-api@vger.kernel.org (open list:ABI/API), linux-crypto@vger.kernel.org (open list:CRYPTO API), linux-doc@vger.kernel.org (open list:DOCUMENTATION), linux-kernel@vger.kernel.org (open list), linux-security-module@vger.kernel.org (open list:KEYS-ENCRYPTED), tpmdd-devel@lists.sourceforge.net (moderated list:TPM DEVICE DRIVER) Subject: [PATCH v2 0/3] TPM 2.0 trusted key features for v4.5 Date: Sun, 13 Dec 2015 17:42:28 +0200 Message-Id: <1450021353-8775-1-git-send-email-jarkko.sakkinen@linux.intel.com> X-Mailer: git-send-email 2.5.0 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org These are the remaining features to enable trusted keys for TPM 2.0 that were not finished by the v4.4 merge window. These patches enable authorization policy based sealing (like using PCRs together with a password for example or something more complicated) with a user selected hash algorithm. Jarkko Sakkinen (3): keys, trusted: fix: *do not* allow duplicate key options keys, trusted: select hash algorithm for TPM2 chips keys, trusted: seal with a TPM2 authorization policy Documentation/security/keys-trusted-encrypted.txt | 31 +++++++----- crypto/hash_info.c | 2 + drivers/char/tpm/tpm.h | 10 ++-- drivers/char/tpm/tpm2-cmd.c | 60 ++++++++++++++++++++--- include/crypto/hash_info.h | 3 ++ include/keys/trusted-type.h | 5 ++ include/uapi/linux/hash_info.h | 1 + security/keys/Kconfig | 1 + security/keys/trusted.c | 56 ++++++++++++++++++++- 9 files changed, 147 insertions(+), 22 deletions(-) -- 2.5.0