Received: by 2002:a05:6a10:a841:0:0:0:0 with SMTP id d1csp3492717pxy; Mon, 26 Apr 2021 03:08:33 -0700 (PDT) X-Google-Smtp-Source: ABdhPJzI175QUZzNz936V7xrt0mIU3TDiY2WRYNJ3SL1nypxqF1/kv/rfWAKedZSpr+9uYMo+unr X-Received: by 2002:aa7:c981:: with SMTP id c1mr11287358edt.7.1619431713085; Mon, 26 Apr 2021 03:08:33 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1619431713; cv=none; d=google.com; s=arc-20160816; b=BxKTzyK9wlmHXxJiwitri5eluDaFXlXIYVJ5yonjI3xhRBKa3j0carSNKPv7dTCjWZ /iyxgNs6wcQ/Wv7geenglIsSPX4UP467kXfzqw+zgawk6G7V1Cja4q9KuCFVn9ydSHnr vp9kxPgB+wY1J2A2pW9oJXQm1Uaza1v4V2r+WBjcBT1JXGFgIvdLmou909XpMdfexAzh Z1IbVHCLAbbuIb2p/CdRSXDZ0yZqIh85C31GA2Lv82VsLmAXlQ1RBI+X8+eEL3c15ajw GKvywRvqU11C18gIyR1Bu/ppkQ+j0BFXLU1FjKvlX4s4ZdD2bW4xsdfnxnj/fLUfU4OP 1UZw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:user-agent:content-disposition:mime-version :reply-to:message-id:subject:to:from:date; bh=UDQ9zEoM1p4xBiiUhfv7PXA5n3Bbh8rS8RtUwnX1E70=; b=iAY0fi8sK8hd2yLbAXPqmBY6g7PMhQ9Pszx+J8usVHn48Hk822KSZ2rgTAatt8TZis 9KBOYSLyxGgGGlBY8qqUBVmejAZgT7OIjzuAU/q9leUq2lyOLq32J2Ngo8XTrCXj9ZFH yRs+nQNgPMRiSd8kjmbzjuceH2OQMG+VqZCCJu2LDNq1M1hrhHrJbE0Ck69kJXz+BV/p 6QI6ruEIYu6FBsuPx40k7+2tEvi/CvCus+JdLZlooRqSLCoxYJt3x/L6lw0B2HyNTLs5 26ynRXjJE3wRBFA6kX1gN7UU9+fdPoGxLjLj38DSFSSLSEuSrAqzCJY+AaZLL6jf7X9J /EbA== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id y15si13346410edm.338.2021.04.26.03.08.00; Mon, 26 Apr 2021 03:08:33 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S232655AbhDZKHs (ORCPT + 99 others); Mon, 26 Apr 2021 06:07:48 -0400 Received: from wind.enjellic.com ([76.10.64.91]:47442 "EHLO wind.enjellic.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S232367AbhDZKHr (ORCPT ); Mon, 26 Apr 2021 06:07:47 -0400 X-Greylist: delayed 1271 seconds by postgrey-1.27 at vger.kernel.org; Mon, 26 Apr 2021 06:07:47 EDT Received: from wind.enjellic.com (localhost [127.0.0.1]) by wind.enjellic.com (8.15.2/8.15.2) with ESMTP id 13Q9jds8008380; Mon, 26 Apr 2021 04:45:39 -0500 Received: (from greg@localhost) by wind.enjellic.com (8.15.2/8.15.2/Submit) id 13Q9jcsE008379; Mon, 26 Apr 2021 04:45:38 -0500 Date: Mon, 26 Apr 2021 04:45:38 -0500 From: "Dr. Greg" To: linux-kernel@vger.kernel.org, linux-sgx@vger.kernel.org Subject: SGX feature extensions patch. Message-ID: <20210426094538.GA8264@wind.enjellic.com> Reply-To: "Dr. Greg" Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4i X-Greylist: Sender passed SPF test, not delayed by milter-greylist-4.2.3 (wind.enjellic.com [127.0.0.1]); Mon, 26 Apr 2021 04:45:39 -0500 (CDT) Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Good morning, I hope the week is starting well for everyone. With the SGX driver having been mainlined in the 5.11 release we will be maintaining and releasing our out-of-tree SGX feature extension patch for each kernel release. The patches will be available using the following URL format: ftp://ftp.enjellic.com/pub/sgx/kernel/SFLC-MAJOR.MINOR.patch With the detached signature available via the following URL: ftp://ftp.enjellic.com/pub/sgx/kernel/SFLC-MAJOR.MINOR.patch.asc The 5.11 patch and signature can thus be retrieved via the following URL's: ftp://ftp.enjellic.com/pub/sgx/kernel/SFLC-5.11.patch ftp://ftp.enjellic.com/pub/sgx/kernel/SFLC-5.11.patch.asc I've included the public signing key that is being used for the signatures at the end of this e-mail. In addition to implementing cryptographic access control policies, the feature extension patch allows the mainline driver to work on platforms that do not have Flexible Launch Control. The changelog for the patch contains documentation for how to use the cryptographic access control policies, along with the rationale for enabling support for non-FLC platforms, which is basically the fact that with the mainline Linux driver there is very little hardware available to developers who would be interested in working with SGX on Linux. The driver extensions are unit tested on both FLC and non-FLC hardware. We would, of course, be interested in any productive suggestions, security issues or enhancement requests. Depending on the trajectory of mainline development, we may add support for partial page initialization if that doesn't look like it is headed for mainline inclusion. Best wishes for a productive week. Dr. Greg -----BEGIN PGP PUBLIC KEY BLOCK----- mQENBF8dmycBCADXgZ6HCPySuo8vgp3rieiC3BmifUIwV2m/j0nPCmB7Y7+nw478 2ukY6NTCNjGFpkGner3ie4ZYVriP6G2LevW0oG+QYl+wKRY+1OajtrNvzRZMSf1p M6Z68Gi8nf8X4dsO9fvjK2s3BQUwBy4NnqmNQBbFvM07PMzo1hmcFxHlEHiUsCfg LIyhZn4BSD9aS3hLiCwoLG8vYjZEwttTQJHDrijlBph5SCD28M97NA1GZrgalH3X u1wOy3ka+AwqqaUL5dv4VPOoCQZ0JmhGs5yQ6hAsswxfE0blN86UAKd6KgQo22B+ ZKkyoqdVvp957SoEWkxtCBlP/mk+J3FgRD25ABEBAAG0LkVTRCBzaWduaW5nIGtl eSAoRHIuIEdyZWcpIDxncmVnQGVuamVsbGljLmNvbT6JATgEEwECACIFAl+LHqgC GwMGCwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAAAoJEIVKlBhNXzHzSy8H/25hFzCX t53HwDaldNGZAjlnnSyxPjRm5t4ssDs5HL58Y6RhqWbMSO7sk/b7ybmVELbcynHP m3AMEF3xpnCjy/1KlpW1iLwhXqgfEAV66Fhk7IQxNWuePM7PKmRKTvAQMa4ghjaW 1ZHtPSpFN7JY45IcZn6IuUPai8qD4FzMjr2Ig6flRVbK5CJQR0DCJrHluakks4UA id8h+S54D+uEu4czlgAbStJFgolWCHEzMFOirujel518sBEt3euACRoibatcQfHB hur45j/5nGq6lhyktul7PRlGmIg2GRWAf3757sM1jK3rkpbTeyoXG+lZ1YpcXTnr Zk6Cg+qn2TKwnby5AQ0EXx2bJwEIAO4zkEhVH17CBpxfhaRlgEjgc4XdcVrCIT9j SOq2eTA2ZC19Vtd9L+ZUNQ8I5bSt/B6Si03jcTqsIZeDhfMTLAmhGvhZEy4nHoKu KtxKuEZ0CjkEcs+J6pF2P+yqXe85RhQ43HPZckmQL65cVjCLczLXFvA+qrUJUfYO 4YnyLueDSeDwpGXtIHCS7t4jTvEmu067PaUCuemYRGrpkDHpb82qtB38fXof6oPc jImYPFk09HamsxfV4fLVf3wRMWiYjgSnEHpwzHaqZ5mVBfNzhd+RPUjZ4N7SoFtC G6hRAH2erzxz8SlOuEyjlvEW9fKghN6bIx/7juLpgNqVLJO5QEMAEQEAAYkBHwQY AQIACQUCXx2bJwIbDAAKCRCFSpQYTV8x806WB/4tuueIWMZemeocOlbBI7IBTrrl D4tTny1TT2c/hH4LRYqlWaCY9KyKt2g66HeFJGXSsr8j8Sy86N5jBtiZ355i4FxS as5q1smDGJ9aWKpYRrrgfKcn8pHYj1PqXKriHg+mvt9knqpouyFeCMoxl/waMNPM fwWTS+Q8GV3hPpQOtnk6JwennznYgMLGPbbavY+mtDCMbHcZ02seJyhc3do/sgeO Dd5Lp9OXy65tu1LDktuvd3H8nwrdpTFngVN0/3OxUREy1Iazma3TjZYY7HyPMC5Y Xa+3GhT5UsybSb0VF/5/xDJFAPi/utFUOJsEZ1ZawLRuDNoUFWJx/rOpMUY6uQEN BF8doDEBCACom+4EKfeYzBJEw6vfacePPr1avY/ZRBhknMQ1IKmTqFh9bO7sDwZH Uzm/h9xXMRTFtHWCpCrfxYfCw1lJ0hFNPFs2fETjfBU5CSxhookvFXBW8RwexKcs eOVtdot9abhhLKhFmDpfKephuPfP4xq/wEwB8BH5hVr6KXZUjIqQgssQpmbJqj0O n+1RZAzo4puRWLSOrmI+AwAZS2gE8XPWFxOETXLUwZ1JybxLCgvtJ15ZybdIydph A+Hd5NyYFVizjNJQFIiZAg/P2XK1swre2yLymwXlj/QwIyKK5qbNWEV7bwwI/kac G+A2FjUB50jRQ4lHVSGaOC5RJfjW/eqVABEBAAGJAkQEGAECAA8FAl8doDECGwIF CQPCZwABKQkQhUqUGE1fMfPAXSAEGQECAAYFAl8doDEACgkQHIEunSZmRDBtuggA g7K7d41GNYtQ7lWMUm3utEliWePT+RxVW+sDcYEnmyv7Y8Nf6cuUlJjONISkIsdZ 9rXtRYLtYL82I49/27B7QyinMYg0G/gpAjr4QYfoOwS+gIEMCcu/ubBfESaOj483 p7nIHpjLvctsoqA4ZIMQwcRySkQ/msGoSVziYOo5DnoCi8IGaGwB0g81dZJO18Tn qvnzVm+mSgrzz+yg/chggGrODfTM8d3wVX6JMBaFH7mB/6BBn1rN0lvHWCmzgys4 IrK7nO7zk66OmFNdIXmuWPtn1sg1+HoYU5qiuuUXH8PHxeQuAgOXmR3JLg1GSwUc CMZbz+eMLifIvFghgO/edFeRCAC+Cho/QL+1ggzeMSAkQlzeQnQv+8tDXcKHMaTl XCnlj3hNA1t1rVEdVQS+F5rRIWKhnvirn9N3H2LgjPlvyjOTSUYaU3LDvTJr+wX4 RzoGiH6x1wnVnTtbSYISkVCbih8R2/stXeZQr6PRtjpQPPYb13Miy4fSowQP13K2 aQ5xGxCGRPguGHWSBY21bUBMzrAdtRTWXI0ttKZyvChGTTwJBiZ4cdQAvfYDuXxc 8BqNcx/jtx9HCfKrHfVPA9A/q/72m7XFN6MtmcutZYXUZIxjz7jT05OsT2x+4/lg xFlUqrvnNFc0E5XAT2eTFEBv+S+NbTP+LWaum77u93QrwcxquQENBF+e5BcBCADC JOafzH4vo8TNz3h24K7Tm7AlF+VZwDdD/LZhEQ8q2t3Ck7b12oZdvU9DPvaI+bNg sb8A0wN26jeFaSxZnL/EuRde0vZlcuFSNxsTLfQyc89hWBNUY4bToI72jvzlnpAB Q6487ANtXwRbvuypmJtNwyVDCRXTyhrJtgo4oEXsrRcPmd7JLtQDxm8QPFigOb80 6W/ujwTv1/BvsbQwxNzNrx4BYnMO9Ds4Cr6scRFDbdAfbWGaFpar/G81wsNTwte8 0mbNVO2RViOdVpqrDgfOBmfzjZPM309hts9RLcvuYVLlUaOzo4c/30ZmDKgfC+bA JpKq+NTcil4BH9pXG2tzABEBAAGJASUEGAECAA8FAl+e5BcCGyAFCQJX2oAACgkQ hUqUGE1fMfNaDAf/S0zj8unyo+GVaNhN5q4FzYAwZMVCHY6V0LQXwUuF4EUCRHp4 gTZ5i81+t2lqHIuScOtAE2Z7XRIImnoFFLI0dNxQqlQ78abpeiOMTOCWQQa7JpJE JumnPOkRWiqdvCjy494N+SHvKHirhi9JQzRV+ZdE2rifjQXfhXFDGHd4tntzjB7V 9A2C95/Imtzh3K9uPxi2lzCMAu4hL59vR9xzTnp1lqlj7BbwqSUzMzdURTjEmPeL sZQkVZI23mS5LRxmZA+c0THogdi1cUZ/qyH+S41iY3KIMYWmkTG19s2l8MsRkhio unEH7sy5Alwk3lu03EE2iJzcAsQ4jq3xYSt0nw== =WFeh -----END PGP PUBLIC KEY BLOCK----- As always, Dr. Greg Wettstein, Ph.D, Worker Autonomously self-defensive Enjellic Systems Development, LLC IOT platforms and edge devices. 4206 N. 19th Ave. Fargo, ND 58102 PH: 701-281-1686 EMAIL: greg@enjellic.com ------------------------------------------------------------------------------ "Heaven goes by favor. If it went by merit, you would stay out and your dog would go in." -- Mark Twain