Received: by 2002:ac0:a5a7:0:0:0:0:0 with SMTP id m36-v6csp564100imm; Fri, 3 Aug 2018 07:56:57 -0700 (PDT) X-Google-Smtp-Source: AAOMgpcSaG09jzuROmQVpN+hp3KVqtCihS/cP8p1fmVwvN/y1UcCne45/1rATxow9X33aZ9s4E0b X-Received: by 2002:a63:115e:: with SMTP id 30-v6mr4211907pgr.53.1533308216947; Fri, 03 Aug 2018 07:56:56 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1533308216; cv=none; d=google.com; s=arc-20160816; b=PzYkg4jJYYtSMjL7TR2zf4anFOela0d8IrqBkm89iVks2O7fxylGWefR5G0h/AYGbS q+Lwih5gpz4R0VqUbS58SoMGk2Cc/7xECD9afwVRM9Kt7nlENBPKkpvBJNHBy4nrii4A geIdgEwOyaSl9rtYvrmVpZAOOdjunDdRCxdKqHCquj7V0kgeP4jAaMo5mZ9/zulrPhKO 0PTdxxLbNf0G+0YA88r4B71wUY9tyTWFb1eCFMOs/jHv3M0+r2U9uBgfliZBydI2mLXs ygGjGMuF+YWYsQKvFT5cMu4Q51l/Z8J4fZlA5HbshKfgTo7qOK72UI3VDneVSNuvp/v4 b9GQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:message-id:date:content-id:mime-version :subject:cc:to:references:in-reply-to:from:organization :arc-authentication-results; bh=SdkozBdBz/av3GhUZ/UHOLvD89CVz5ulj9IJbOSwoF8=; b=wLYwO2qryYaNvjbg3wXEv/ZMZO0BIE0E3tctmW/0VB8JQayzU+HiQ5x0CcjrUai5Lu ggtCbqnUGw0QEmUF6h9QB+LH5gys3lEqlE8PPqrWBeTx8AAueiCC7kVLpUrHSwP8A49n TuScq+mna+6/rV+mtw0fVbu/Svck5zrcSMoUpLtzpuCm4bIdvy9Qaki7I+u61Jtyo6Lr Ubue/SU1BrXV4YAqgoOx9F/7hEYSaYUg5PnsiSOxpaafobcwgpwcPoHwWuFa725ZiH+6 jLMOtJUMqdxXfRQyMcCM7v8h5R6FqR/2uSsbtUsfFSSopKBnA/wH6d4mvICiyWDj8vos d6Kw== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=redhat.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id 1-v6si3882822ply.483.2018.08.03.07.56.42; Fri, 03 Aug 2018 07:56:56 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=redhat.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1732374AbeHCQw1 (ORCPT + 99 others); Fri, 3 Aug 2018 12:52:27 -0400 Received: from mx3-rdu2.redhat.com ([66.187.233.73]:45056 "EHLO mx1.redhat.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1732345AbeHCQw1 (ORCPT ); Fri, 3 Aug 2018 12:52:27 -0400 Received: from smtp.corp.redhat.com (int-mx04.intmail.prod.int.rdu2.redhat.com [10.11.54.4]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.redhat.com (Postfix) with ESMTPS id A8448818F6EE; Fri, 3 Aug 2018 14:55:45 +0000 (UTC) Received: from warthog.procyon.org.uk (ovpn-120-78.rdu2.redhat.com [10.10.120.78]) by smtp.corp.redhat.com (Postfix) with ESMTP id 43D562026D65; Fri, 3 Aug 2018 14:55:43 +0000 (UTC) Organization: Red Hat UK Ltd. Registered Address: Red Hat UK Ltd, Amberley Place, 107-111 Peascod Street, Windsor, Berkshire, SI4 1TE, United Kingdom. Registered in England and Wales under Company Registration No. 3798903 From: David Howells In-Reply-To: <1533307535.4337.415.camel@linux.ibm.com> References: <1533307535.4337.415.camel@linux.ibm.com> <20180723111432.26830-1-udit.agarwal@nxp.com> <8060.1533226481@warthog.procyon.org.uk> <1533297482.4337.373.camel@linux.ibm.com> <1533306238.4140.1.camel@HansenPartnership.com> To: Mimi Zohar Cc: dhowells@redhat.com, James Bottomley , Udit Agarwal , zohar@linux.vnet.ibm.com, jmorris@namei.org, serge@hallyn.com, denkenz@gmail.com, linux-integrity@vger.kernel.org, keyrings@vger.kernel.org, linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org, sahil.malhotra@nxp.com, ruchika.gupta@nxp.com, horia.geanta@nxp.com, aymen.sghaier@nxp.com Subject: Re: [PATCH v2 1/2] security/keys/secure_key: Adds the secure key support based on CAAM. MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <25966.1533308142.1@warthog.procyon.org.uk> Date: Fri, 03 Aug 2018 15:55:42 +0100 Message-ID: <25968.1533308142@warthog.procyon.org.uk> X-Scanned-By: MIMEDefang 2.78 on 10.11.54.4 X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.5.16 (mx1.redhat.com [10.11.55.8]); Fri, 03 Aug 2018 14:55:45 +0000 (UTC) X-Greylist: inspected by milter-greylist-4.5.16 (mx1.redhat.com [10.11.55.8]); Fri, 03 Aug 2018 14:55:45 +0000 (UTC) for IP:'10.11.54.4' DOMAIN:'int-mx04.intmail.prod.int.rdu2.redhat.com' HELO:'smtp.corp.redhat.com' FROM:'dhowells@redhat.com' RCPT:'' Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Mimi Zohar wrote: > "trusted" keys are currently being used to decrypt other keys (eg. > encrypted, ecryptfs, ...). Can it decrypt both symmetric and asymmetric keys? David