Received-SPF: pass (google.com: domain of linux-crypto-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
From:   Varun Sethi <V.Sethi@nxp.com>
To:     Herbert Xu <herbert@gondor.apana.org.au>,
        Pankaj Gupta <pankaj.gupta@nxp.com>
CC:     "jarkko@kernel.org" <jarkko@kernel.org>,
        "a.fatoum@pengutronix.de" <a.fatoum@pengutronix.de>,
        "Jason@zx2c4.com" <Jason@zx2c4.com>,
        "jejb@linux.ibm.com" <jejb@linux.ibm.com>,
        "zohar@linux.ibm.com" <zohar@linux.ibm.com>,
        "dhowells@redhat.com" <dhowells@redhat.com>,
        "sumit.garg@linaro.org" <sumit.garg@linaro.org>,
        "david@sigma-star.at" <david@sigma-star.at>,
        "michael@walle.cc" <michael@walle.cc>,
        "john.ernberg@actia.se" <john.ernberg@actia.se>,
        "jmorris@namei.org" <jmorris@namei.org>,
        "serge@hallyn.com" <serge@hallyn.com>,
        "davem@davemloft.net" <davem@davemloft.net>,
        "j.luebbe@pengutronix.de" <j.luebbe@pengutronix.de>,
        "ebiggers@kernel.org" <ebiggers@kernel.org>,
        "richard@nod.at" <richard@nod.at>,
        "keyrings@vger.kernel.org" <keyrings@vger.kernel.org>,
        "linux-crypto@vger.kernel.org" <linux-crypto@vger.kernel.org>,
        "linux-integrity@vger.kernel.org" <linux-integrity@vger.kernel.org>,
        "linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>,
        "linux-security-module@vger.kernel.org" 
        <linux-security-module@vger.kernel.org>,
        Sahil Malhotra <sahil.malhotra@nxp.com>,
        Kshitiz Varshney <kshitiz.varshney@nxp.com>,
        Horia Geanta <horia.geanta@nxp.com>
Subject: RE: [EXT] Re: [RFC PATCH HBK: 2/8] hw-bound-key: flag-is_hbk added to
 the tfm
Thread-Topic: [EXT] Re: [RFC PATCH HBK: 2/8] hw-bound-key: flag-is_hbk added
 to the tfm
Thread-Index: AQHYwbSVJxssHkcinkOJLgRDaMQm8K3R9HsAgAGdVwCAAAD6gIAAKqCAgAADO4CAAgk08A==
Date:   Mon, 12 Sep 2022 17:19:44 +0000
Message-ID: <AM9PR04MB8211C7D59379D4C9F877D20EE8449@AM9PR04MB8211.eurprd04.prod.outlook.com>
References: <20220906065157.10662-1-pankaj.gupta@nxp.com>
 <20220906065157.10662-3-pankaj.gupta@nxp.com>
 <YxbsBiCrIQT/0xz6@gondor.apana.org.au>
 <DU2PR04MB86308036FB517BF8CAD3D32795419@DU2PR04MB8630.eurprd04.prod.outlook.com>
 <YxhHkz+UlE9XAG/Z@gondor.apana.org.au>
 <DU2PR04MB86308DB7CFBC7A31CEB612D295419@DU2PR04MB8630.eurprd04.prod.outlook.com>
 <YxhuC3QlurfSgdXG@gondor.apana.org.au>
In-Reply-To: <YxhuC3QlurfSgdXG@gondor.apana.org.au>
Accept-Language: en-US
Content-Language: en-US
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: =?us-ascii?Q?+0HtFVW9RQy/AiGHLLVq3+cH5iZ86/QPlI/aQuifyGNObZDafebvctEOAiFD?=
 =?us-ascii?Q?zR4XJY4K9sRNPk3MPriseKuVqeji6ZE39v0GkSNQZDHbrYe9bHG0UCv7BE4i?=
 =?us-ascii?Q?qd0AuB7cvsHTKhChZJphUzk5um8c0C1vRvAX1WZp3M2L7y3BLfHv5pleHQYR?=
 =?us-ascii?Q?qnEdJofOdlq3+OzV4inxtTrGE97raC6JrqjVikCcEWgRNvGu4OEzQsoZeSn4?=
 =?us-ascii?Q?4b/ApyzCUX66puOljE/En10FWjQLqaQgF1WEwUNA6EQgIh8WsmhWwrXXM2Fn?=
 =?us-ascii?Q?GlHwlIsR9NsLszjQ4WrDa7+KwhjoUsNuXv/bhxEeUR02o/VYih5UZZmaWyHv?=
 =?us-ascii?Q?xP87tTsV8/zvfpvNtE6UI0q9w1SfDcJNwedOWcQTkkC5Msn+xquk4+3RqpX4?=
 =?us-ascii?Q?qoodszcGaaUefmeDr8S1eVKw3KxCz6nc/w4Ov8xz1QD7XCsZE/GFmU0oPCri?=
 =?us-ascii?Q?MGkBovOMOuj81uHzAKZh/znKa3Zl3g+5jCcy4Zd7uJb8c65x5hhO+qH/dwVo?=
 =?us-ascii?Q?xOeLWzzXCONWhdH9nwyxel3gyURKIzdd/GMweZzXNlDTA/X47W8MZbqQeXgW?=
 =?us-ascii?Q?ScsqaXnqtbKJIXFO76MK3GCZNKy4v3lwrmO68oB5YEpt7kWyv/sPLTmCA+db?=
 =?us-ascii?Q?POIxZEjNLBTJKgJJ2TthELjesA1g+0yWriPSg5T5tw4te6vET+bczKD0z3BE?=
 =?us-ascii?Q?w/NgDjuG9We/LamSN/T2LZbWd98k3QvspNbTdklR0BxNh8zwJU3DO8EbYt9K?=
 =?us-ascii?Q?QGEOFlyyB6uWMg1I6fCaKAfsufZCVHjMembHeQioRhWXRlQg/aAUEY+JOzcM?=
 =?us-ascii?Q?ZT//+I9JRwPqbNKe1bbcZePPZZMOkFEVtIegO1KpUP26g9aatm/JBgVmPDJP?=
 =?us-ascii?Q?1nWQOUMq8tKDnv5BRUNn6XOuDuUSIFblMyAFUjdO2fsqp12qAkbM1eqe2gro?=
 =?us-ascii?Q?PZXdPAf0h4JOePV4T5w6FKiBRRFvdrDWHlR7phZp9WMFacw6NYAZtfZVIrEm?=
 =?us-ascii?Q?k9QiSVIz5NIfbSXjjOsrNqbbJDmVMozVnkc7SL4ODyrULGwC6M8/ngel3kff?=
 =?us-ascii?Q?ELRQkxL14oZF+MCuH3WUxzhIOHFNbtR80sOxtgN3B1uEywPHMRCM1YQMXhMd?=
 =?us-ascii?Q?TIphDTB16/+RfNQIsJg4BvVJBjyLQ4HhTVJfzmNCRSpKpoBvu+IHUrgJAnPh?=
 =?us-ascii?Q?GhtYIDMIN1TxOHHYlGoSWKObpm4Vodf+6+KXv/bOum64TYuSu8qU81Isu5xO?=
 =?us-ascii?Q?GcdmXsv8t0kCAvqgKeLidspQpLrJNvfDW+mSDLjqI5AGEldvTGcV5rNDtJyL?=
 =?us-ascii?Q?vTpipxCmPBcWgP0zD6bcdcxjd+ZkecX7geS8OXxBSRxBvxDljqyxB+lbNmKd?=
 =?us-ascii?Q?W5yS7d09eTbIXL/vCaB0s+cMHnSgk0eqiN/rJgDPyL72Iz2ZrhMOO1NoMJRJ?=
 =?us-ascii?Q?cD46Kpralcd0fhwLVcoxgd+xt+TkAzZ9ffa1ro69Ht6Lt12654QB+nW64hid?=
 =?us-ascii?Q?Rj+rpWBhqsLmzSGUG/cCEIjPTLByPUjQ3XslrcWxgzpLXHChTw+BnWY9UdMI?=
 =?us-ascii?Q?emHF/4J6dg1WITbNqhk=3D?=
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: nxp.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: AM9PR04MB8211.eurprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id: fdf7ce46-3d4a-4ca3-4385-08da94e2fc88
X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Sep 2022 17:19:44.6186
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 686ea1d3-bc2b-4c6f-a92c-d99c5c301635
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: wGaBfj+wpnUDc+EsIqRYUYnZvKFviz6AcQTnkMfI4u35hoy7uTKV0yeMhOnwA8Pq
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DBBPR04MB7499
X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED,
        DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_NONE,
        RCVD_IN_MSPIKE_H2,SPF_HELO_PASS,SPF_PASS,T_SCC_BODY_TEXT_LINE
        autolearn=ham autolearn_force=no version=3.4.6
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
        lindbergh.monkeyblade.net
Precedence: bulk
List-ID: <linux-crypto.vger.kernel.org>
X-Mailing-List: linux-crypto@vger.kernel.org

Hi Herbert
Please find response inline.


Regards
Varun

> -----Original Message-----
> From: Herbert Xu <herbert@gondor.apana.org.au>
> Sent: Wednesday, September 7, 2022 3:40 PM
> To: Pankaj Gupta <pankaj.gupta@nxp.com>
> Cc: jarkko@kernel.org; a.fatoum@pengutronix.de; Jason@zx2c4.com;
> jejb@linux.ibm.com; zohar@linux.ibm.com; dhowells@redhat.com;
> sumit.garg@linaro.org; david@sigma-star.at; michael@walle.cc;
> john.ernberg@actia.se; jmorris@namei.org; serge@hallyn.com;
> davem@davemloft.net; j.luebbe@pengutronix.de; ebiggers@kernel.org;
> richard@nod.at; keyrings@vger.kernel.org; linux-crypto@vger.kernel.org; l=
inux-
> integrity@vger.kernel.org; linux-kernel@vger.kernel.org; linux-security-
> module@vger.kernel.org; Sahil Malhotra <sahil.malhotra@nxp.com>; Kshitiz
> Varshney <kshitiz.varshney@nxp.com>; Horia Geanta <horia.geanta@nxp.com>;
> Varun Sethi <V.Sethi@nxp.com>
> Subject: Re: [EXT] Re: [RFC PATCH HBK: 2/8] hw-bound-key: flag-is_hbk add=
ed
> to the tfm
>=20
> Caution: EXT Email
>=20
> On Wed, Sep 07, 2022 at 09:58:45AM +0000, Pankaj Gupta wrote:
> >
> > There are 3rd party IP(s), which uses kernel for crypto-algorithm's ope=
rations.
> > Modifying the algorithm name in these IP(s), is not always allowed or e=
asy to
> maintain.
>=20
> So the objective is to support out-of-tree modules?
[Varun] No, the intention is not to use out of tree modules but to allow se=
amless use of crytpo ciphers with keys backed by security co-processors (ke=
ys only visible to security co-processors), by Linux kernel and userspace c=
omponents. Hardware backed keys are being introduced as a variant of existi=
ng Trusted keys, with the difference that these are not un-sealed and relea=
sed in plain to the kernel memory. With the current patchset, the existing =
set of ciphers can be used along with newly introduced hardware backed flag=
. The security co-processor driver is able to interpret the flag and subseq=
uently program the hardware, to interpret the supplied key as a hardware ba=
cked key.
>=20
> There is no way I'm merging this then.
>=20
> Thanks,
> --
> Email: Herbert Xu <herbert@gondor.apana.org.au> Home Page:
> https://eur01.safelinks.protection.outlook.com/?url=3Dhttp%3A%2F%2Fgondor=
.ap
> ana.org.au%2F~herbert%2F&amp;data=3D05%7C01%7CV.Sethi%40nxp.com%7Cd
> ec165619848426b9c9008da90b946da%7C686ea1d3bc2b4c6fa92cd99c5c30163
> 5%7C0%7C0%7C637981422690327443%7CUnknown%7CTWFpbGZsb3d8eyJWIj
> oiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C300
> 0%7C%7C%7C&amp;sdata=3DkKaGEvKOmUbV8hCh6T9Fswfo39jg%2BqbxYavPcfJS
> h3E%3D&amp;reserved=3D0
> PGP Key:
> https://eur01.safelinks.protection.outlook.com/?url=3Dhttp%3A%2F%2Fgondor=
.ap
> ana.org.au%2F~herbert%2Fpubkey.txt&amp;data=3D05%7C01%7CV.Sethi%40nxp.
> com%7Cdec165619848426b9c9008da90b946da%7C686ea1d3bc2b4c6fa92cd99
> c5c301635%7C0%7C0%7C637981422690327443%7CUnknown%7CTWFpbGZsb3
> d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3
> D%7C3000%7C%7C%7C&amp;sdata=3DvSNYijBOH5mCmOzZW02R0sNzNNrtTWkD
> vF8%2FpwlTUqk%3D&amp;reserved=3D0