Received-SPF: pass (google.com: domain of linux-kernel+bounces-174649-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:45e3:2400::1 as permitted sender) client-ip=2604:1380:45e3:2400::1;
From: Jarkko Sakkinen <jarkko@kernel.org>
To: Linus Torvalds <torvalds@linux-foundation.org>
Cc: Jarkko Sakkinen <jarkko@kernel.org>,
	Peter Huewe <peterhuewe@gmx.de>,
	Jason Gunthorpe <jgg@ziepe.ca>,
	David Howells <dhowells@redhat.com>,
	linux-integrity@vger.kernel.org,
	linux-kernel@vger.kernel.org,
	keyrings@vger.kernel.org
Subject: [GIT PULL] trusted keys changes for v6.10-rc1
Date: Thu,  9 May 2024 18:47:51 +0300
Message-ID: <20240509154751.25983-1-jarkko@kernel.org>
Precedence: bulk
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit

  Merge tag '6.9-rc7-ksmbd-fixes' of git://git.samba.org/ksmbd (2024-05-08 10:39:53 -0700)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd.git tags/keys-trusted-next-6.10-rc1

for you to fetch changes up to 28c5f596ae3d1790cdc96fa5fc7370f934abfb2e:

  docs: trusted-encrypted: add DCP as new trust source (2024-05-09 18:29:03 +0300)

----------------------------------------------------------------
Hi,

This is pull request for trusted keys subsystem containing a new key
type for the Data Co-Processor (DCP), which is an IP core built into
many NXP SoCs such as i.mx6ull.

BR, Jarkko

----------------------------------------------------------------
David Gstir (6):
      crypto: mxs-dcp: Add support for hardware-bound keys
      KEYS: trusted: improve scalability of trust source config
      KEYS: trusted: Introduce NXP DCP-backed trusted keys
      MAINTAINERS: add entry for DCP-based trusted keys
      docs: document DCP-backed trusted keys kernel params
      docs: trusted-encrypted: add DCP as new trust source

 Documentation/admin-guide/kernel-parameters.txt   |  13 +
 Documentation/security/keys/trusted-encrypted.rst |  53 ++++
 MAINTAINERS                                       |   9 +
 drivers/crypto/mxs-dcp.c                          | 104 ++++++-
 include/keys/trusted_dcp.h                        |  11 +
 include/soc/fsl/dcp.h                             |  20 ++
 security/keys/trusted-keys/Kconfig                |  18 +-
 security/keys/trusted-keys/Makefile               |   2 +
 security/keys/trusted-keys/trusted_core.c         |   6 +-
 security/keys/trusted-keys/trusted_dcp.c          | 332 ++++++++++++++++++++++
 10 files changed, 554 insertions(+), 14 deletions(-)
 create mode 100644 include/keys/trusted_dcp.h
 create mode 100644 include/soc/fsl/dcp.h
 create mode 100644 security/keys/trusted-keys/trusted_dcp.c