Received-SPF: pass (google.com: domain of linux-crypto-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
From:   Pankaj Gupta <pankaj.gupta@nxp.com>
To:     "jlu@pengutronix.de" <jlu@pengutronix.de>,
        Jarkko Sakkinen <jarkko@kernel.org>
CC:     "a.fatoum@pengutronix.de" <a.fatoum@pengutronix.de>,
        "Jason@zx2c4.com" <Jason@zx2c4.com>,
        "jejb@linux.ibm.com" <jejb@linux.ibm.com>,
        "zohar@linux.ibm.com" <zohar@linux.ibm.com>,
        "dhowells@redhat.com" <dhowells@redhat.com>,
        "sumit.garg@linaro.org" <sumit.garg@linaro.org>,
        "david@sigma-star.at" <david@sigma-star.at>,
        "michael@walle.cc" <michael@walle.cc>,
        "john.ernberg@actia.se" <john.ernberg@actia.se>,
        "jmorris@namei.org" <jmorris@namei.org>,
        "serge@hallyn.com" <serge@hallyn.com>,
        "herbert@gondor.apana.org.au" <herbert@gondor.apana.org.au>,
        "davem@davemloft.net" <davem@davemloft.net>,
        "j.luebbe@pengutronix.de" <j.luebbe@pengutronix.de>,
        "ebiggers@kernel.org" <ebiggers@kernel.org>,
        "richard@nod.at" <richard@nod.at>,
        "keyrings@vger.kernel.org" <keyrings@vger.kernel.org>,
        "linux-crypto@vger.kernel.org" <linux-crypto@vger.kernel.org>,
        "linux-integrity@vger.kernel.org" <linux-integrity@vger.kernel.org>,
        "linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>,
        "linux-security-module@vger.kernel.org" 
        <linux-security-module@vger.kernel.org>,
        Sahil Malhotra <sahil.malhotra@nxp.com>,
        Kshitiz Varshney <kshitiz.varshney@nxp.com>,
        Horia Geanta <horia.geanta@nxp.com>,
        Varun Sethi <V.Sethi@nxp.com>
Subject: RE: [EXT] Re: [RFC PATCH HBK: 0/8] HW BOUND KEY as TRUSTED KEY
Thread-Topic: [EXT] Re: [RFC PATCH HBK: 0/8] HW BOUND KEY as TRUSTED KEY
Thread-Index: AQHYwbSICZxhOSR7uk+zrvSafpZt0K3SGjKAgAFFWYCAAD+nAIAADdrw
Date:   Wed, 7 Sep 2022 09:57:55 +0000
Message-ID: <DU2PR04MB863055712C4D919D7892AAC795419@DU2PR04MB8630.eurprd04.prod.outlook.com>
References: <20220906065157.10662-1-pankaj.gupta@nxp.com>
         <YxcLqepquOuOOjvq@kernel.org>
         <DU2PR04MB86303DE3507B6FF37BD5B6A595419@DU2PR04MB8630.eurprd04.prod.outlook.com>
 <843e1f1cbed67ce558e20d1e56a82dfe27732028.camel@pengutronix.de>
In-Reply-To: <843e1f1cbed67ce558e20d1e56a82dfe27732028.camel@pengutronix.de>
Accept-Language: en-US
Content-Language: en-US
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: =?iso-8859-1?Q?fa0BPBRxYe6tTpiLBTL9lXBO+omGq5Z3SJFUTv5QpNRT3v7Ylm0f36pD4j?=
 =?iso-8859-1?Q?Rae9l7LlJP7gPY6MTl+OPXxmIP2nJAEiq7o3DmoxXil/Ugb1hGYzYWiyL5?=
 =?iso-8859-1?Q?+6ItR9q82iBE+2/KBjBo8W/EDLzFSnNB5CNYGqZnWm+VE50MzJTSIdY2GA?=
 =?iso-8859-1?Q?j1dfTKCNyYdGl/JJA4L04iRDDsBDzSV00Ex0UqoAF1sBzSdIvvXJFN0e5N?=
 =?iso-8859-1?Q?UojhezTz2wAqi8FWq9ROVOzmv8dvsf8mpctE0p6HNCmfy7ct5+TtBba4h9?=
 =?iso-8859-1?Q?HKzd/GNRyR22FpUsHt371uKCg+/C7WhXttHMfK23oa3p9x+h8bv2RGcQKG?=
 =?iso-8859-1?Q?4iSyPqLzdrRfWJedhX8IzXtvidPUsyNddvmdR0doIufUI7gPJs/oH48MBF?=
 =?iso-8859-1?Q?kplLIYZ0yV6Ytwu5u4EEido2YkiQPl0r4l0bSZZVL1pb9oRwOJkXsPbPbl?=
 =?iso-8859-1?Q?wZZB8sBqn1D3eBunIkI1O73Cj2mutu8bLc5PmHFnC4U33iv8adKWzE9mA8?=
 =?iso-8859-1?Q?maFqLU68+S/z5k9Eu9iQHdLY7tVl+VkI48HEkLJ52KxWOY27ZYVeB0Zm6N?=
 =?iso-8859-1?Q?nHOkaUZnsS42dIY+j4jMnY5Z3elC8GR1ZXjbUqCZUpFykLbDwMRBnRa48p?=
 =?iso-8859-1?Q?2jXp4gwrstqTYXFvbxeXejks1IyxVhp5Kqmuc2T8x5oozz1BdZgTV3i1zU?=
 =?iso-8859-1?Q?9PLTBx97dcZJPUnzO05YHCwo6MRLl6KPYveOsuCpZ8YakT7Lx5s8I4724o?=
 =?iso-8859-1?Q?FULceepRnI5u8APZ2AirE0humpwPLvaVUcng0sV9n7XzYR0aU83ZAOFXol?=
 =?iso-8859-1?Q?OFi1zC1q7YfvNd4eIZEGF2v4glCzhqhcdU7bI0rW67u7HY4NPKgI1nsUS5?=
 =?iso-8859-1?Q?Yum+2T6cacqd6MRvlVWxjddn9MERxv9XCKClOZqIjd1BzC1zSiB8BxjLTq?=
 =?iso-8859-1?Q?63rYnBxFTwi119WzJAPK4Bk9rWQ6P84nF/xWcTC0/Dc4xUMEnxZfJtT3GM?=
 =?iso-8859-1?Q?f8uiXQldDtuRS17UDEfWn/7JngSZmEV1bn+n4WSt/sYKQzn49Vt1Rcx7Df?=
 =?iso-8859-1?Q?BztaAdXDeUXl4L3bAIs0eK5+lfdRbjUTdET5XRhgmYFw/Hn7ffof8APOL8?=
 =?iso-8859-1?Q?27C7IgncX47rqotl12H4YDa5eBESRfZvdXf+bo8ASjkbzWMDViqV4CAXzv?=
 =?iso-8859-1?Q?4zvhdAmv8ijHLU1DeEUngxnCGupbg6avbhMzZUAbSJZDbCv/QGXIyqqPrA?=
 =?iso-8859-1?Q?V9J8iBUwLuTJ8Rfa2FyqZkF+PHw0XEW6SJ3L4FtLaha9KuoGyR+0fUl/XC?=
 =?iso-8859-1?Q?gtWMBkaRKhUv+J+P7ep1qXNUzYGTLxSy9sn3ZSkM8rOPQYmwpLFOBxXOrv?=
 =?iso-8859-1?Q?xSf07CEX9Df872J2JoDbAZk14/hEe1LTxpGb23JVRXvUqhzI4I1haS9AQJ?=
 =?iso-8859-1?Q?DTSXu7eQQioAHhE1WTCf7K89ZLpwgg/DU23PtUXKqPLtLmcOY7tM0i+vWY?=
 =?iso-8859-1?Q?PwRHS45DFXdkUgjWFXO5VnW8GYJdcIyXQyavcGODml2yZ+q/gZC/adOEnc?=
 =?iso-8859-1?Q?haTscUi7+7YoscxgEvdcveIgzXtYmomjW7OaZSmp7ix23js4otBSgV/tQ4?=
 =?iso-8859-1?Q?o+G3I1xgNiV9zUTA5+JP5Nfw63qSRn7x1q?=
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: nxp.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: DU2PR04MB8630.eurprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: c942e59f-d3c9-42b6-2397-08da90b76fe6
X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Sep 2022 09:57:55.6801
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 686ea1d3-bc2b-4c6f-a92c-d99c5c301635
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: wu2X0vnZD8D3s1Z5duY4iKcUhWxyPN2xEPt0eXUzG0uv7NWOp99wvWVw4MBP/Qi8XfKHcIdKRr84KtgXWaB0rA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8PR04MB7493
X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED,
        DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_NONE,
        RCVD_IN_MSPIKE_H2,SPF_HELO_PASS,SPF_PASS,T_SCC_BODY_TEXT_LINE
        autolearn=ham autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
        lindbergh.monkeyblade.net
Precedence: bulk
List-ID: <linux-crypto.vger.kernel.org>
X-Mailing-List: linux-crypto@vger.kernel.org


> -----Original Message-----
> From: Jan L=FCbbe <jlu@pengutronix.de>
> Sent: Wednesday, September 7, 2022 1:41 PM
> To: Pankaj Gupta <pankaj.gupta@nxp.com>; Jarkko Sakkinen
> <jarkko@kernel.org>
> Cc: a.fatoum@pengutronix.de; Jason@zx2c4.com; jejb@linux.ibm.com;
> zohar@linux.ibm.com; dhowells@redhat.com; sumit.garg@linaro.org;
> david@sigma-star.at; michael@walle.cc; john.ernberg@actia.se;
> jmorris@namei.org; serge@hallyn.com; herbert@gondor.apana.org.au;
> davem@davemloft.net; j.luebbe@pengutronix.de; ebiggers@kernel.org;
> richard@nod.at; keyrings@vger.kernel.org; linux-crypto@vger.kernel.org;
> linux-integrity@vger.kernel.org; linux-kernel@vger.kernel.org; linux-
> security-module@vger.kernel.org; Sahil Malhotra
> <sahil.malhotra@nxp.com>; Kshitiz Varshney <kshitiz.varshney@nxp.com>;
> Horia Geanta <horia.geanta@nxp.com>; Varun Sethi <V.Sethi@nxp.com>
> Subject: Re: [EXT] Re: [RFC PATCH HBK: 0/8] HW BOUND KEY as TRUSTED KEY
>=20
> Caution: EXT Email
>=20
> On Wed, 2022-09-07 at 07:22 +0000, Pankaj Gupta wrote:
> > Even if somehow the key is retrieved from the keyring, the retrieved
> > key would be an encrypted key.
> > This encrypted key can only be decrypted by Hardware, which generated i=
t.
> >
> > Hence, the retrieved key is unusable outside of the hardware.
>=20
> NXP's CAAM unit (i.e. on i.MX6) supports several modes of sealed/encrypte=
d
> keys.
> The (un)sealing process uses a key that is normally derived from a per-de=
vice
> key in eFUSES. One aspect of these modes is whether the plaintext key
> material is accessible to the kernel or not.
>=20
> Ahmad's patch set added support for a mode where the CAAM is used to
> seal plaintext known to the kernel to a "blob" (in CAAM terminology) on
> export to userspace and the reverse on import. This mode allows the kerne=
l
> to use the plaintext for dm-crypt, to encrypt other keyrings and similar.
>=20
> The CAAM has another sealing mode, where it will not allow writing of the
> plaintext key to memory. Instead, it is kept in one of the CAAM-internal =
key
> registers. There, it can be used for cryptographic operations (i.e. AES).=
 This
> way, the plaintext key is protected even from the kernel. The kernel coul=
d
> keep a copy of in sealed form, so it can reload the CAAM's key register w=
hen
> needed.
>=20
>=20
> Pankaj, is that the mode you intend to support with this series?
Yes, this is what is called as "black key", in CAAM terminology.
Black key is nothing but a HBK key.
This is what I am trying to achieve with this patch-set.

>=20
> Could you describe the high-level use-cases this would be need for,
> compared to the existing mode where plaintext keys are accessible to the
> kernel? In which cases would you use each mode?
>=20

High-level Use-case is to ensure runtime security.
By runtime security, I mean, key that is added to keyring after blob-decaps=
ulation,=20
- if get  stolen, then being plain key, security can be compromised.
- After this patch-set, if key get stolen, then being HBK(encrypted by H/W)=
, will not be of any use without HW. Security is not   compromised.

> Regards,
> Jan
> --
> Pengutronix e.K.                           |                             =
|
> Industrial Linux Solutions                 |
> https://eur01.safelinks.protection.outlook.com/?url=3Dhttp%3A%2F%2Fwww.
> pengutronix.de%2F&amp;data=3D05%7C01%7Cpankaj.gupta%40nxp.com%7Cb
> 1335df185404e02df1108da90a8886c%7C686ea1d3bc2b4c6fa92cd99c5c301635
> %7C0%7C0%7C637981350763081319%7CUnknown%7CTWFpbGZsb3d8eyJWIj
> oiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3
> 000%7C%7C%7C&amp;sdata=3DaNxEETFYLc74F%2BOq9IK3p63tniVfczpgslG3LYe
> ZzAo%3D&amp;reserved=3D0  |
> Peiner Str. 6-8, 31137 Hildesheim, Germany | Phone: +49-5121-206917-0    =
|
> Amtsgericht Hildesheim, HRA 2686           | Fax:   +49-5121-206917-5555 =
|