Received: by 2002:ac0:946b:0:0:0:0:0 with SMTP id j40csp1384256imj; Fri, 8 Feb 2019 00:08:37 -0800 (PST) X-Google-Smtp-Source: AHgI3IZe7v6FnZ6uLjh4dffpE7t0C4DSL6jdhcTMi1ycD68u+sTAarDCPIEM83lLf9EZC316N+39 X-Received: by 2002:a17:902:bcc2:: with SMTP id o2mr5683214pls.69.1549613317719; Fri, 08 Feb 2019 00:08:37 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1549613317; cv=none; d=google.com; s=arc-20160816; b=Jh4hxfb+TKlEt/v9r6bKZS2EWEnfAET496jsOJlplz94Rtfm4T/VXkpiFV6tSSY5+a ZwAkIlE5LB3xrcNgcfYvWTOUKpfQDMqIYG6JWfo9aZdsh2LJVUSqH/21H5yYq2NokbqW LUdqhERJ6MNqdR/pKhYL4qiRuhxSZJmIfF8A6CD7lAkxQxX034VKWS2ifRIACS5gtPLm e6U3zHl01Ogar1hnTgZX1KK4TI/DuchQFabcqLYPW4BLfdZaUFEalpikD69lTMk07U5Y /IPM/lYR/Gn4byBw93BxOzeKS02AubzwKtpT6pm+yt5yyu8uVR6t1k8x288SY7wpKLFP O5jQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:user-agent:in-reply-to :content-disposition:mime-version:references:message-id:subject:cc :to:from:date; bh=cuRUPjN8gUu4xWmPxrNiIOBzTn95V7OAgGk+d+AJ0cY=; b=ODNxb0MzRAJxp2scgyY/pwDcZ5fLFsSCgfQWjJuJfXJ8bpWkry6wNkjYBYZS71MIt8 0mutB/MrvlbgDh0antizRd5W1y2oiZHycWMwDtHtm6J0mOfyo4qYpSbg7k65Xk+o2aZb qynR2/Z2xBI6P80Pma7mM74h+LdgbUjI9h31oIfhcx0mYn019GzvsxkdqLdBzsM0MDEq ikIbpm0litJWGnuMZ78oCPx+kp0jJ+FZitJvhjlhPst3f/H1jVIvP8htJFjYUtPx7Ft3 HranUw2KJHfP0LWcEoN3pdSYA9YB39oJU5fURGV1YLE/kh6iQb77s9WzQn2r58gnH7ap opTQ== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id q66si577955pga.334.2019.02.08.00.08.21; Fri, 08 Feb 2019 00:08:37 -0800 (PST) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1727311AbfBHIGb (ORCPT + 99 others); Fri, 8 Feb 2019 03:06:31 -0500 Received: from orcrist.hmeau.com ([104.223.48.154]:34380 "EHLO deadmen.hmeau.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1726915AbfBHIGb (ORCPT ); Fri, 8 Feb 2019 03:06:31 -0500 Received: from gondobar.mordor.me.apana.org.au ([192.168.128.4] helo=gondobar) by deadmen.hmeau.com with esmtps (Exim 4.89 #2 (Debian)) id 1gs1Aa-00013q-6n; Fri, 08 Feb 2019 16:05:56 +0800 Received: from herbert by gondobar with local (Exim 4.89) (envelope-from ) id 1gs1AR-0002Uw-Ej; Fri, 08 Feb 2019 16:05:47 +0800 Date: Fri, 8 Feb 2019 16:05:47 +0800 From: Herbert Xu To: Stephan Mueller Cc: Eric Biggers , James Bottomley , Andy Lutomirski , "Lee, Chun-Yi" , "Rafael J . Wysocki" , Pavel Machek , linux-kernel@vger.kernel.org, linux-pm@vger.kernel.org, keyrings@vger.kernel.org, "Rafael J. Wysocki" , Chen Yu , Oliver Neukum , Ryan Chen , David Howells , Giovanni Gherdovich , Randy Dunlap , Jann Horn , Andy Lutomirski , linux-crypto@vger.kernel.org Subject: Re: [PATCH v2 0/6] General Key Derivation Function Support Message-ID: <20190208080547.224fudg2m22d3a6d@gondor.apana.org.au> References: <20190103143227.9138-1-jlee@suse.com> <12103603.N4N57GesWC@tauon.chronox.de> <20190208074558.j3k6gw66q4e2y2lv@gondor.apana.org.au> <1798550.XZem68xxzE@tauon.chronox.de> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <1798550.XZem68xxzE@tauon.chronox.de> User-Agent: NeoMutt/20170113 (1.7.2) Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Fri, Feb 08, 2019 at 09:00:59AM +0100, Stephan Mueller wrote: > > Thanks for the clarification. And do you have a suggestion how we can should > ensure that the self-tests are run only once? Making it run at kernel init time should be good enough. > Also, shall we add the signature verification enforcemnt to the helper as > well? What do you mean by that? Cheers, -- Email: Herbert Xu Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt