From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mx0a-0031df01.pphosted.com (mx0a-0031df01.pphosted.com [205.220.168.131]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id DF5B23D5646 for ; Sat, 16 May 2026 11:50:51 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=205.220.168.131 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1778932253; cv=none; b=T4hx8THGibGD+PeTRITNAq7v3OzphqzL2j7LSuCb0pDdxHcRqFwX6pmYgXGYkyP9p3TgOnXBh0OyEZcxSPKGCGr/Uvgk433qOAAvBvW6PLhxyEno1SDSarlyD2WaUQlefA5xHti517zzDOkO85BVLk8R86K1IAGQ5A4KiCVtBBY= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1778932253; c=relaxed/simple; bh=0zVuvU0DEFqMUuBWazbipjd7ejokNvbJUVXxUtQaNU4=; h=From:To:Cc:Subject:Date:Message-Id:MIME-Version; b=S0YPotKf71dF/pTRjgoh634vMk7+eaU1BZ73miocK7cctTbF3hhrKKuecLl99WKBTnu5CaYUZIm8wcNz1Sh+OWg0ObfJql2hR9IsmL5b590fA5r5k3nwTFBJDoZN+6hTdNAyM5a4cl4uOFp/djZZGcXogesS8/CJkGwe7Yjd780= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=oss.qualcomm.com; spf=pass smtp.mailfrom=oss.qualcomm.com; dkim=pass (2048-bit key) header.d=qualcomm.com header.i=@qualcomm.com header.b=feYskJqa; dkim=pass (2048-bit key) header.d=oss.qualcomm.com header.i=@oss.qualcomm.com header.b=TBduEQbg; arc=none smtp.client-ip=205.220.168.131 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=oss.qualcomm.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=oss.qualcomm.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=qualcomm.com header.i=@qualcomm.com header.b="feYskJqa"; dkim=pass (2048-bit key) header.d=oss.qualcomm.com header.i=@oss.qualcomm.com header.b="TBduEQbg" Received: from pps.filterd (m0279862.ppops.net [127.0.0.1]) by mx0a-0031df01.pphosted.com (8.18.1.11/8.18.1.11) with ESMTP id 64G4BWkp784656 for ; Sat, 16 May 2026 11:50:51 GMT DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=qualcomm.com; h= cc:content-transfer-encoding:date:from:message-id:mime-version :subject:to; s=qcppdkim1; bh=591wW0cz4jKPEpWJVzEC9GxGm5HxycZ+Yq8 xB3GJlPo=; b=feYskJqasqxjs8GhftHMlLJZ7d0l+nlnfE62ME7qbkL8wPtbGUV msbBHDH/Ak1cCGCc+D3ZEHUA0/OwvOIo55bvIrRYCtekYAxNYHnef+jHkuZiGHkX R06l43JOaNvOcfyexkXgDTB1F7qrq3sN8dlaP+T9Q2ZmO+k/jCGzieTxwl45SPQl 5+TmzDbCWJtPK+dy9+Ayr4yw+nioe6r1Kjnv5ocGSHJ8mCK410C9fZmdJtACrVnY r0H9zzk7ZWQTpg4dhZdTEcD7gcavDlTo/ZPblXeH2vFd6YDNmM11uCjdHFvEZmin dyONWFjvKGxSx4ohAN0FxylK7YdTspz5MDw== Received: from mail-dy1-f197.google.com (mail-dy1-f197.google.com [74.125.82.197]) by mx0a-0031df01.pphosted.com (PPS) with ESMTPS id 4e6hbc8qsg-1 (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256 bits=128 verify=NOT) for ; Sat, 16 May 2026 11:50:51 +0000 (GMT) Received: by mail-dy1-f197.google.com with SMTP id 5a478bee46e88-2bda35eab74so473608eec.0 for ; Sat, 16 May 2026 04:50:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=oss.qualcomm.com; s=google; t=1778932250; x=1779537050; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=591wW0cz4jKPEpWJVzEC9GxGm5HxycZ+Yq8xB3GJlPo=; b=TBduEQbgFWjCwgEh9lgG+1H0lFDT5t9krDx0kxUzgUj9+k1JYG7muRF7nd2RlcWXvK mIAPzM+P5m8ywDjH0sRonzfT4xs7crjmOGGPyyRG+je9k95EJgr81remQP7gwdT0Y199 /eajttgj/iBcrIQWtoFGvY0W+U2/B/o3RWsqcFoUuEjD5yofj8ymCM01AFdN9tqnTboT 0VfGb/zwCLIgYfsd4nHzdxz+mEcNWf/WNB6wE9ccGNZp/CogkIHiNa43j7cdfINQYIon OGKLdrIkAVrm97u5U6fNi4ytqaQs32GAL5cOUDB6ZmF+DHznY8CK8Hsc3D4ijsZNHvol YCVA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778932250; x=1779537050; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=591wW0cz4jKPEpWJVzEC9GxGm5HxycZ+Yq8xB3GJlPo=; b=R+F3/cCx/fdBZ3XYQlThbwEBm5pK3r6Lc6BMDUdF7H8ZyhbS9UdjkdD0CtQ6mqsPo6 hQ/kb8zYBQCPE7YxBDNfum5eUbChm6fZ9xojbxY0gnQhqf5EPHDat4mF42kRXGb+D2Ys UCLxuLBiVXE6rIj+t4uwDTDXDg1ro33p+t5JU0SKkSpyCOVDO4XG9/MCASKTOFGU7bNS p+XXvpRl7i7DflVfyCoc9mVH7NmRmewcQMuVcTTu0REBTFl35h+DnUbTTc28Y9u/v6zq gEHvHa4BLrmwJ7uK+m5YTZkI3UCUj5VUkUC79Bmw9HRJHVU3y/Ckz+K9KLms0qtPveSC fPRw== X-Forwarded-Encrypted: i=1; AFNElJ82VVwdhhdo2nDGnxiez+XncDeIkwXVIolCA44nLAUT+FY75ZLtC/5k7UenTFZUUfsTHp5ya0BmkXVpLjY=@vger.kernel.org X-Gm-Message-State: AOJu0Yz0dhifdzN7RWhv+i6fRCw1Z6iQw65+WOFazw46NjG5DE6WtBzk /IplRn80KQaGGtuPlLj01r+867w9zKwwbfrIBBXswBP78cxIW0vld1P+6TJreh3kApL6mNQXyTE zJLx9xOFCAQRcbFyXIX4YUS9GFPZBlPYKB5DB+F2HjWKJPRs1sf/YVf/jt8sE7bqJSqN7wbd/xy A= X-Gm-Gg: Acq92OGLIGTpWPWTP9M6qyjzhiHuZzIi3vHCYzwPgDRE8YyOhq1fn4ij+ftnRZQ7q5I pxMSNRBxZTgu093vL2jlR6DLK8ArD+TQbEXXtfnqTm0agEIeVxlzMUYIz/CJRsrvUK2YpgXbQk3 UkZCpJJ4UPE35mFjYcw9/CMCpGgDt3FLWazBFZCdEUiadbsBSEDHgKv3fqKrQim8891HOdP+LZW 8FpXdiNGSZU51MnI82yjHDL9EcPJqJhQbJxw3cHn0P8/NrDjMPvW0as/yqf2ahu0w7MO1VLFu1R 0xz3XaIu5F0G4V7+4KdE0+VEBFAm+WOub/kdKTxnxgTnYxqPl/haCbZ2PcSJKLemdwpMUMqIEnM zNT/nn3oiE6XXMyklhsmlKdSkACTdybz/aKfl30Dt/QbcZh8tzvKi2V9jL8yHVO5MWpd2IU68UA PyfAvD X-Received: by 2002:a05:7300:e28b:b0:2c5:c532:1fe1 with SMTP id 5a478bee46e88-3025eaafc6dmr5602957eec.3.1778932250191; Sat, 16 May 2026 04:50:50 -0700 (PDT) X-Received: by 2002:a05:7300:e28b:b0:2c5:c532:1fe1 with SMTP id 5a478bee46e88-3025eaafc6dmr5602947eec.3.1778932249623; Sat, 16 May 2026 04:50:49 -0700 (PDT) Received: from u20-san1p10573.qualcomm.com (i-global254.qualcomm.com. [199.106.103.254]) by smtp.gmail.com with ESMTPSA id 5a478bee46e88-30293e2e69esm11782612eec.1.2026.05.16.04.50.49 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sat, 16 May 2026 04:50:49 -0700 (PDT) From: Linlin Zhang To: Mikulas Patocka , Eric Biggers Cc: Alasdair Kergon , Mike Snitzer , Benjamin Marzinski , Neeraj Soni , dm-devel@lists.linux.dev, linux-kernel@vger.kernel.org Subject: [PATCH v2 0/1] dm-inlinecrypt: add support for hardware-wrapped keys Date: Sat, 16 May 2026 04:50:44 -0700 Message-Id: <20260516115045.3958326-1-linlin.zhang@oss.qualcomm.com> X-Mailer: git-send-email 2.25.1 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Authority-Analysis: v=2.4 cv=cuSrVV4i c=1 sm=1 tr=0 ts=6a085a1b cx=c_pps a=Uww141gWH0fZj/3QKPojxA==:117 a=JYp8KDb2vCoCEuGobkYCKw==:17 a=NGcC8JguVDcA:10 a=s4-Qcg_JpJYA:10 a=VkNPw1HP01LnGYTKEx00:22 a=u7WPNUs3qKkmUXheDGA7:22 a=_K5XuSEh1TEqbUxoQ0s3:22 a=562HgMpRWxI6aWW4kWAA:9 a=PxkB5W3o20Ba91AHUih5:22 X-Proofpoint-Spam-Details-Enc: AW1haW4tMjYwNTE2MDExNiBTYWx0ZWRfXwE6E9E6Cl9FK XFmWz0giFlXZ6Vw5aICkt7bZp8rK2sgTgBpG4tdsd/SPXzYh5LzmI+TpwG+bQaNenYC0ft+6qjj MXJ/9ZYXWnk3cvhG1XvGh0h3k9Y9yjBXBrE4LVDf/qBMTl76vmDOo4+0ZcBO/ULKTQyXbhBEHfH WGC3E4wTFpkw/nsGVpjr+dCGs3GmhZCfAwmEjBlkYoaV0zTikTJbGcfAPX0DEHaE2oke6dAH43J VJYd0780O6bs24aSn5oxTUw+XWmr+EcZDyQoy9FzDFRnW5kxjzmGAzmhzm9ZHeh44O//XWy4fqS GJ3YFwXA5uCxuRhZAJ/io5LEHm4zjZtb+VGdsCDZpms3i5D4OKyxR3Yt5cgbA9a20VeIekTGH2C lk8INdVqHMbOe4v1McfU4n4UiXWmlwikW6fh1dL3GWuCuqJzS1EZdJPfnXc4pRaDb550hvMXtlW biovz36AjAwepUuTe9Q== X-Proofpoint-GUID: peR7Ovqw_p3g7KUYAie9RJPdROobXvRV X-Proofpoint-ORIG-GUID: peR7Ovqw_p3g7KUYAie9RJPdROobXvRV X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1143,Hydra:6.1.51,FMLib:17.12.100.49 definitions=2026-05-16_01,2026-05-15_01,2025-10-01_01 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 priorityscore=1501 malwarescore=0 impostorscore=0 bulkscore=0 adultscore=0 spamscore=0 clxscore=1015 suspectscore=0 phishscore=0 lowpriorityscore=0 classifier=typeunknown authscore=0 authtc= authcc= route=outbound adjust=0 reason=mlx scancount=1 engine=8.22.0-2605130000 definitions=main-2605160116 dm-inlinecrypt currently assumes that all keys are raw software keys. That does not work for platforms where inline encryption expects hardware-wrapped key material managed by secure firmware/hardware. This series adds support for hardware-wrapped keys in dm-inlinecrypt by introducing an explicit target argument. The flag lets dm-inlinecrypt select the proper blk-crypto key type at key initialization time: - 0: BLK_CRYPTO_KEY_TYPE_RAW - 1: BLK_CRYPTO_KEY_TYPE_HW_WRAPPED With this change, dm-inlinecrypt can support both raw and wrapped key deployment models without hardcoding one key ownership model. The series also: - updates target argument parsing to include the new required flag - propagates the wrapped/raw state in target status output - updates dm-inlinecrypt documentation and examples accordingly Note: this extends target syntax by adding one required parameter, so existing userspace table definitions must be updated. dm-inlinecrypt currently assumes that all keys are raw software keys. That does not work for platforms where inline encryption expects hardware-wrapped key material managed by secure firmware/hardware. This series adds support for hardware-wrapped keys in dm-inlinecrypt by introducing an explicit target argument. The flag lets dm-inlinecrypt select the proper blk-crypto key type at key initialization time: - 0: BLK_CRYPTO_KEY_TYPE_RAW - 1: BLK_CRYPTO_KEY_TYPE_HW_WRAPPED With this change, dm-inlinecrypt can support both raw and wrapped key deployment models without hardcoding one key ownership model. The series also: - updates target argument parsing to include the new required flag - propagates the wrapped/raw state in target status output - updates dm-inlinecrypt documentation and examples accordingly Note: this extends target syntax by adding one required parameter, so existing userspace table definitions must be updated. Linlin Zhang (1): dm-inlinecrypt: add support for hardware-wrapped keys .../device-mapper/dm-inlinecrypt.rst | 10 ++- drivers/md/dm-inlinecrypt.c | 71 +++++++++++-------- 2 files changed, 50 insertions(+), 31 deletions(-) -- 2.34.1