Received: by 2002:a05:6a10:9848:0:0:0:0 with SMTP id x8csp4699254pxf; Tue, 30 Mar 2021 14:52:15 -0700 (PDT) X-Google-Smtp-Source: ABdhPJy6LpPdEr3JjYkIIVbpuy9nwZBMKU9YuJ856z4ZqmPdpncOM7jSKt8If8fPtJfBCx3JUW8/ X-Received: by 2002:a17:906:4e91:: with SMTP id v17mr197016eju.331.1617141135798; Tue, 30 Mar 2021 14:52:15 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1617141135; cv=none; d=google.com; s=arc-20160816; b=GGWcA1FhgJJNvRft5oQ5pxtUzuCYUpptOOmVd9c+trp2L5/TL6ba6COVn/cAD1fL/5 RY89d/qHDrV5BnpHJ4MVC5Nj0ErLjQ7JywEl0WtJKXIfD65Gq23aSWmtjZnhtv8Fuj9y XY4eUhtmAuqCLY80n7tZZIdDlurxZLVQajs+yIuDlCGBZlTrx/B2g7Skij8p0pQZYg+e hQ6JnlnkFmwzziDk7szcCe/FG8Em1td/4wBGo2JQlFHcz5deCVKFrPOC60XSVcVAvRlZ e4gjh9Qy1NBjkBk9NBpN6sMl92XCblrttXLRPuchO3fsW/OhxA80Z5oNA4fNksCv5dPB UMRg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:dkim-signature; bh=+K4nfDlNqS+buaOaVq0AwqLIJ0qhfMJqcEYS+OVTapc=; b=MZyzDMRguV9dPY/5yChbUPs6AGeXTtAFzwT1Tw2u3q0DPRgbw64ircbfCw6gvWzGHv wV7OcEBB25fX5N7SvA0N2f7xJrKx2wYPiUOuksGzI93O7iI5ULBE4SzJwV713ZXp1QbD UkZW2BuVsiPOkbtKoz74g520tcSv0vmqo59M1jRfBomwRJQ3AJv8fI7dabhSgExA1NuH fzZSgLR83l6yk33uYritZDauZNDOZSpeF7OJdtJ+gQmW9RHZ4uuCKCR9z42WiMESfo2o JHLJBbW9Oed7EbwmlxEwXwc7e8FAdoa8YdhJaP2i91cUAT8dpp/xjmADqKkcx9nsjUVT lG0w== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@gmail.com header.s=20161025 header.b=NDqsZVY+; spf=pass (google.com: domain of linux-crypto-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-crypto-owner@vger.kernel.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id d3si186134edq.276.2021.03.30.14.51.52; Tue, 30 Mar 2021 14:52:15 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-crypto-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@gmail.com header.s=20161025 header.b=NDqsZVY+; spf=pass (google.com: domain of linux-crypto-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-crypto-owner@vger.kernel.org; dmarc=pass (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S232607AbhC3VvQ (ORCPT + 99 others); Tue, 30 Mar 2021 17:51:16 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:56610 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S230125AbhC3VvE (ORCPT ); Tue, 30 Mar 2021 17:51:04 -0400 Received: from mail-qv1-xf36.google.com (mail-qv1-xf36.google.com [IPv6:2607:f8b0:4864:20::f36]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 67095C061574; Tue, 30 Mar 2021 14:51:04 -0700 (PDT) Received: by mail-qv1-xf36.google.com with SMTP id cx5so8961070qvb.10; Tue, 30 Mar 2021 14:51:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=+K4nfDlNqS+buaOaVq0AwqLIJ0qhfMJqcEYS+OVTapc=; b=NDqsZVY+29ySsRg/3HK1AA9ORV4ajVk3u617yrGmsZWxFWcoaAYGq23GczTy0umqTH zbXaf9OVWiu4k1LhyQJVkrAiM/MoA0COtEgwl/dMRGUTGnDkmq6gwsdcB771g4tFCljH kQ3GH6/35vFXENrtuus3SAZ08usNE50+792tG7PfsyK7dvTRmdQeq9MXS0tcx9T0WgYy Zsv1nC2/iKlh50dieaiECdA/DZTmSORJRjmK8233DGdyXd7o4kiI9iiTfuxcf38Rpxtt Q9Txi/rmBlh5W9mSla1tJWDeLLfKG0USMfQlMXWS74O2US11V9sk26jcukF5Q7gPj5kD 1IfQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=+K4nfDlNqS+buaOaVq0AwqLIJ0qhfMJqcEYS+OVTapc=; b=KSTZi/AMVFLr18G1q7C23TRYLo3xSiucZ7YkjnaK7etCb4N+R68cWroTmr6LEKUBki 10YY4A5ov7927g35oPJK+oUP17yMV74y647l52jZJCPWkiQpx7x9jKEAdzrw6JpsduOP weSVxTXOBWLR8/ivgCXtbBjrjZY2aOhQrbskWrac3OhGS1lS6g4lNjwAyt4Ad+8se5EW P5hsAv2meKfkyRn4RlcmhHUwAiDI/U+qzT2zbg2Y6oNrmr+VUV9B6y4fCEk/3ic/9dji AkUCg2KfBwMCYXmZztnh1flpY6fHZXWvwR9MDbBPkkGd7jsWFkwUcmLELAfqJWGerDq7 33Qw== X-Gm-Message-State: AOAM5304/aDWEgAG4NKcTpgHTzfusD5x7erYtevhwRcd2WIy/xm5OQYW F79lg9EOhly25ZkXcfIN3bX8FAkP6xX0uVSseME= X-Received: by 2002:ad4:57a5:: with SMTP id g5mr215200qvx.60.1617141063684; Tue, 30 Mar 2021 14:51:03 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Richard Weinberger Date: Tue, 30 Mar 2021 23:50:52 +0200 Message-ID: Subject: Re: [PATCH v1 0/3] KEYS: trusted: Introduce support for NXP CAAM-based trusted keys To: Ahmad Fatoum Cc: Jarkko Sakkinen , =?UTF-8?Q?Horia_Geant=C4=83?= , Mimi Zohar , Aymen Sghaier , Herbert Xu , "David S. Miller" , James Bottomley , kernel@pengutronix.de, David Howells , James Morris , "Serge E. Hallyn" , Steffen Trumtrar , Udit Agarwal , Jan Luebbe , David Gstir , Franck LENORMAND , Sumit Garg , linux-integrity@vger.kernel.org, keyrings@vger.kernel.org, Linux Crypto Mailing List , LKML , LSM Content-Type: text/plain; charset="UTF-8" Precedence: bulk List-ID: X-Mailing-List: linux-crypto@vger.kernel.org Ahmad, On Wed, Mar 17, 2021 at 3:08 PM Ahmad Fatoum wrote: > TABLE="0 $BLOCKS crypt $ALGO :32:trusted:$KEYNAME 0 $DEV 0 1 allow_discards" > echo $TABLE | dmsetup create mydev > echo $TABLE | dmsetup load mydev Do you also plan to add support for this to cryptsetup? David and I have added (rough) support for our CAAM/DCP based keyrings to cryptsetup: https://github.com/sigma-star/cryptsetup/tree/rw/plain I'm pretty sure with minimal changes it will work with your recent approach too. -- Thanks, //richard