mirror of https://lore.kernel.org/lkml/
 help / color / mirror / Atom feed
From: Anderson Lizardo <anderson.lizardo@indt.org.br>
To: linux-kernel@vger.kernel.org, linux-arm-kernel@lists.arm.linux.org.uk
Cc: "Russell King - ARM Linux" <linux@arm.linux.org.uk>,
	David Brownell <david-b@pacbell.net>,
	Tony Lindgren <tony@atomide.com>,
	Anderson Briglia <anderson.briglia@indt.org.br>,
	Anderson Lizardo <anderson.lizardo@indt.org.br>,
	Carlos Eduardo Aguiar <carlos.aguiar@indt.org.br>
Subject: [patch 0/5] Add MMC password protection (lock/unlock) support V2
Date: Wed, 28 Dec 2005 14:40:14 -0400	[thread overview]
Message-ID: <20051228184014.571997000@localhost.localdomain> (raw)

Hi,

These series of patches add support for MultiMediaCard (MMC) password
protection, as described in the MMC Specification v4.1. This feature is
supported by all compliant MMC cards, and used by some devices such as Symbian
OS cell phones to optionally protect MMC cards with a password.

By default, a MMC card with no password assigned is always in "unlocked" state.
After password assignment, in the next power cycle the card switches to a
"locked" state where only the "basic" and "lock card" command classes are
accepted by the card. Only after unlocking it with the correct password the
card can be normally used for operations like block I/O.

Password management and caching is done through the "Kernel Key Retention
Service" mechanism and the sysfs filesystem. The Key Retention Service is used
for (1) unlocking the card, (2) assigning a password to an unlocked card and
(3) change a card's password. To remove the password and check locked/unlocked
status, a new sysfs attribute was added to the MMC driver.

A sample text-mode reference UI written in shell script (using the keyctl
command from the keyutils package), can be found at:

http://www.indt.org.br/10le/mmc_pwd/mmc_reference_ui-20051215.tar.gz

New in this version:

- Removed unnecessary #include directive
- Fixed comment formatting issues.
- Added code to force the block driver to re-probe() the card after unlocking
  it.

TODO:

- Password caching: when inserting a locked card, the driver should try to
 unlock it with the currently stored password (if any), and if it fails,
 revoke the key containing it and fallback to the normal "no password present"
 situation.

- Currently, some host drivers assume the block length will always be a power
 of 2. This is not true for the MMC_LOCK_UNLOCK command, which is a block
 command that accepts arbitratry block lengths. We have made the necessary
 changes to the omap.c driver (present on the linux-omap tree), but the same
 needs to be done for other hosts' drivers.

Known Issue:

- Some cards have an incorrect behaviour (hardware bug?) regarding password
 acceptance: if an affected card has password <pwd>, it accepts <pwd><xxx> as
 the correct password too, where <xxx> is any sequence of characters, of any
 length. In other words, on these cards only the first <password length> bytes
 need to match the correct password.

Comments, suggestions are welcome.
--
Anderson Briglia,
Anderson Lizardo,
Carlos Eduardo Aguiar
Embedded Linux Lab - 10LE
Nokia Institute of Technology - INdT
Manaus - Brazil

             reply	other threads:[~2005-12-28 18:55 UTC|newest]

Thread overview: 8+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2005-12-28 18:40 Anderson Lizardo [this message]
2005-12-28 18:40 ` [patch 1/5] " Anderson Lizardo
2005-12-28 18:40 ` [patch 2/5] " Anderson Lizardo
2005-12-28 18:40 ` [patch 3/5] " Anderson Lizardo
2005-12-29  9:07   ` Chris White
2005-12-28 18:40 ` [patch 4/5] " Anderson Lizardo
2005-12-28 21:23   ` Arnd Bergmann
2005-12-28 18:40 ` [patch 5/5] " Anderson Lizardo

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20051228184014.571997000@localhost.localdomain \
    --to=anderson.lizardo@indt.org.br \
    --cc=anderson.briglia@indt.org.br \
    --cc=carlos.aguiar@indt.org.br \
    --cc=david-b@pacbell.net \
    --cc=linux-arm-kernel@lists.arm.linux.org.uk \
    --cc=linux-kernel@vger.kernel.org \
    --cc=linux@arm.linux.org.uk \
    --cc=tony@atomide.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox

Powered by JetHome