Received: by 2002:a5b:505:0:0:0:0:0 with SMTP id o5csp1425096ybp; Fri, 11 Oct 2019 14:09:02 -0700 (PDT) X-Google-Smtp-Source: APXvYqxbKYNnq/rtxGAQ9VhvOgfmISj0tl+6n3pIp7FqnlASvhbseOEj4Eeuv0wY3sMW1fmSIJ5r X-Received: by 2002:a17:906:3615:: with SMTP id q21mr15553428ejb.152.1570828142444; Fri, 11 Oct 2019 14:09:02 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1570828142; cv=none; d=google.com; s=arc-20160816; b=dd+GlPVVJz3G0fiS+b8ubnztiR8VSzammdfgVd3Pyyk8Hq7/SwZRiqCuw8C2ERxhLs DRieut5b5NSd8qFj82gI4kxr1eYrc73ACVuj8fKsyb9wv+Xx32YwkW89FnGyJJebMw+t qYFDr/4VADNQqdzkXq7BOnxDoPUhETNVO7gvo4v9GND1ndioubABeMG1pqasI/ME/j9S VaDzqtzvbW16pkEs0UrKb9Z0ycC9G/8irQoC8XIsRMUvFDBF+WYhJONGDFzZWmKDkqhc l28gg4gb/6toaestbIg7leY7QnffdC4iRTGulMZR9D/J/fsc3msY9g4/aujvmf6lUGYa 47Iw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:user-agent:in-reply-to :content-disposition:mime-version:references:mail-followup-to :reply-to:message-id:subject:cc:to:from:date; bh=T6nN5QVk09gIDvkOFTEMQ2zlhiOadfEsIkZwkKFcinc=; b=cL2slaOwYGulOw3rtdIa/o2HPtzHPLwvllzyJTqAP86+eW79D8yOfZReKARyFk+Sdg ziU0L91Po4O3TzsTrK3B1DagR7S0axaTIDc6TsL3BEUKuiU1w4RJo/SjOvytDKRoGpjG gb72RLlv5GQODFqDEVrAt0zcAmhHcFp+wX8uLpzo2TnkmczSDgq8yJe2P0Vc8yPJou11 uuU6tsmWENaFcsuGZLiSA+v37VCDRMu1GHd76C0wkv3hUHMrHa7cKI9/gAj4LrWD8AzT V8XO2k1YMGHu0LoBTQFg8OiCn8X3WTFnAodRUZctnLkQOmo5ZdqX+euulaUFXyYzbn6q qYvw== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=redhat.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id p22si6167896ejf.278.2019.10.11.14.08.39; Fri, 11 Oct 2019 14:09:02 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=redhat.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1728854AbfJKVFV (ORCPT + 99 others); Fri, 11 Oct 2019 17:05:21 -0400 Received: from mx1.redhat.com ([209.132.183.28]:53568 "EHLO mx1.redhat.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1727189AbfJKVFV (ORCPT ); Fri, 11 Oct 2019 17:05:21 -0400 Received: from mail-io1-f69.google.com (mail-io1-f69.google.com [209.85.166.69]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mx1.redhat.com (Postfix) with ESMTPS id D6B609B296 for ; Fri, 11 Oct 2019 21:05:20 +0000 (UTC) Received: by mail-io1-f69.google.com with SMTP id u18so16355362ioc.4 for ; Fri, 11 Oct 2019 14:05:20 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:reply-to :mail-followup-to:references:mime-version:content-disposition :in-reply-to:user-agent; bh=T6nN5QVk09gIDvkOFTEMQ2zlhiOadfEsIkZwkKFcinc=; b=agnd3YrLeAZ+JadbSBQk2hznxcD11rNzXCj3eDjGDMQMrF4ACH1dlwXd3SkXjBvGsr z/TqqWQkj8bI0WElfqPrF/LoX6GqV+5enofVM9DS/7Cnxq9CG+XWs/cHxlUNCN3Xf2S+ djy6uTdpTt/bO5pwVPXptTtWNTT3CYQYEtccK/LMO0Qd8CuPcJK5MSRDAjoKl4wYLmX5 BWMWn4W9/7bnsyKi+h1fTU4HtVpzFX51e15oGBDls+g3fuok5148MIcmGdcDBmR6wBNA sA7GbeN+L7cNyVKq4mYjQ/fQyRsqX9ALO38sFx1SbsZT/9T5hF9k828T5E+G++TlntVX 5QZQ== X-Gm-Message-State: APjAAAXiiX79tRtK8kXBzm3i3uKh+EwXoBjx4LGwPctiUQP+9s2oo1FF fb/210WBtnrh5YUv6AG1ztGh8j2vm+JDrlYoW9KT91z1IlVu5SRl5kUD3o+tYUImH127WM3xkGz w2FM0pkaxREMsQOVpzBNlTUdo X-Received: by 2002:a02:cb52:: with SMTP id k18mr19911864jap.97.1570827920182; Fri, 11 Oct 2019 14:05:20 -0700 (PDT) X-Received: by 2002:a02:cb52:: with SMTP id k18mr19911826jap.97.1570827919801; Fri, 11 Oct 2019 14:05:19 -0700 (PDT) Received: from localhost (ip70-163-223-149.ph.ph.cox.net. [70.163.223.149]) by smtp.gmail.com with ESMTPSA id a25sm5765883iod.62.2019.10.11.14.05.18 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 11 Oct 2019 14:05:19 -0700 (PDT) Date: Fri, 11 Oct 2019 14:05:17 -0700 From: Jerry Snitselaar To: Jarkko Sakkinen Cc: Sumit Garg , dhowells@redhat.com, peterhuewe@gmx.de, keyrings@vger.kernel.org, linux-integrity@vger.kernel.org, linux-crypto@vger.kernel.org, linux-security-module@vger.kernel.org, herbert@gondor.apana.org.au, davem@davemloft.net, jgg@ziepe.ca, arnd@arndb.de, gregkh@linuxfoundation.org, jejb@linux.ibm.com, zohar@linux.ibm.com, jmorris@namei.org, serge@hallyn.com, linux-kernel@vger.kernel.org, daniel.thompson@linaro.org Subject: Re: [Patch v7 0/4] Create and consolidate trusted keys subsystem Message-ID: <20191011210517.qxjemugqczsvscu6@cantor> Reply-To: Jerry Snitselaar Mail-Followup-To: Jarkko Sakkinen , Sumit Garg , dhowells@redhat.com, peterhuewe@gmx.de, keyrings@vger.kernel.org, linux-integrity@vger.kernel.org, linux-crypto@vger.kernel.org, linux-security-module@vger.kernel.org, herbert@gondor.apana.org.au, davem@davemloft.net, jgg@ziepe.ca, arnd@arndb.de, gregkh@linuxfoundation.org, jejb@linux.ibm.com, zohar@linux.ibm.com, jmorris@namei.org, serge@hallyn.com, linux-kernel@vger.kernel.org, daniel.thompson@linaro.org References: <1570425935-7435-1-git-send-email-sumit.garg@linaro.org> <20191011123757.GD3129@linux.intel.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Disposition: inline In-Reply-To: <20191011123757.GD3129@linux.intel.com> User-Agent: NeoMutt/20180716 Sender: linux-kernel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Fri Oct 11 19, Jarkko Sakkinen wrote: >On Mon, Oct 07, 2019 at 10:55:31AM +0530, Sumit Garg wrote: >> This patch-set does restructuring of trusted keys code to create and >> consolidate trusted keys subsystem. >> >> Also, patch #2 replaces tpm1_buf code used in security/keys/trusted.c and >> crypto/asymmertic_keys/asym_tpm.c files to use the common tpm_buf code. >> >> Changes in v7: >> 1. Rebased to top of tpmdd/master >> 2. Patch #4: update tpm2 trusted keys code to use tpm_send() instead of >> tpm_transmit_cmd() which is an internal function. >> >> Changes in v6: >> 1. Switch TPM asymmetric code also to use common tpm_buf code. These >> changes required patches #1 and #2 update, so I have dropped review >> tags from those patches. >> 2. Incorporated miscellaneous comments from Jarkko. >> >> Changes in v5: >> 1. Drop 5/5 patch as its more relavant along with TEE patch-set. >> 2. Add Reviewed-by tag for patch #2. >> 3. Fix build failure when "CONFIG_HEADER_TEST" and >> "CONFIG_KERNEL_HEADER_TEST" config options are enabled. >> 4. Misc changes to rename files. >> >> Changes in v4: >> 1. Separate patch for export of tpm_buf code to include/linux/tpm.h >> 2. Change TPM1.x trusted keys code to use common tpm_buf >> 3. Keep module name as trusted.ko only >> >> Changes in v3: >> >> Move TPM2 trusted keys code to trusted keys subsystem. >> >> Changes in v2: >> >> Split trusted keys abstraction patch for ease of review. >> >> Sumit Garg (4): >> tpm: Move tpm_buf code to include/linux/ >> KEYS: Use common tpm_buf for trusted and asymmetric keys >> KEYS: trusted: Create trusted keys subsystem >> KEYS: trusted: Move TPM2 trusted keys code >> >> crypto/asymmetric_keys/asym_tpm.c | 101 +++---- >> drivers/char/tpm/tpm-interface.c | 56 ---- >> drivers/char/tpm/tpm.h | 226 --------------- >> drivers/char/tpm/tpm2-cmd.c | 307 -------------------- >> include/Kbuild | 1 - >> include/keys/{trusted.h => trusted_tpm.h} | 49 +--- >> include/linux/tpm.h | 251 ++++++++++++++-- >> security/keys/Makefile | 2 +- >> security/keys/trusted-keys/Makefile | 8 + >> .../{trusted.c => trusted-keys/trusted_tpm1.c} | 96 +++---- >> security/keys/trusted-keys/trusted_tpm2.c | 314 +++++++++++++++++++++ >> 11 files changed, 652 insertions(+), 759 deletions(-) >> rename include/keys/{trusted.h => trusted_tpm.h} (77%) >> create mode 100644 security/keys/trusted-keys/Makefile >> rename security/keys/{trusted.c => trusted-keys/trusted_tpm1.c} (94%) >> create mode 100644 security/keys/trusted-keys/trusted_tpm2.c >> >> -- >> 2.7.4 >> > >I fixed a merge conflict caused by James' commit. Already pushed. >Compiling test kernel ATM i.e. tested-by's will follow later. > >/Jarkko Are you missing patch 4 on master?