On Sun, May 24, 2026 at 08:15:11AM +0300, Jarkko Sakkinen wrote: > This series introduces key type for operating with asymmetric keys using > a TPM2 chip. > > Change Log > ========== > > v8: > - Reset patch change logs given the overhaul of the code and patches. > - Have only single new subkey type. > - Make key type only use TPM operations. > - Use TPM2_Sign for both ECC and RSA keys. > - Align key descriptions with other key types. > > Previous versions > ================= > > * v7: > https://lore.kernel.org/linux-integrity/[email protected]/ > * v6: > https://lore.kernel.org/linux-integrity/[email protected]/ > * v5: > https://lore.kernel.org/linux-integrity/[email protected]/ > * v4: > https://lore.kernel.org/linux-integrity/[email protected]/ > * v3: > https://lore.kernel.org/linux-integrity/[email protected]/ > * v2: > https://lore.kernel.org/linux-integrity/[email protected]/ > * v1: > https://lore.kernel.org/linux-integrity/[email protected]/ > * Derived from > https://lore.kernel.org/all/[email protected]/ > > > Jarkko Sakkinen (3): > lib/asn1_encoder: Add asn1_encode_integer_bytes() > crypto: Migrate TPMKey ASN.1 objects from trusted-keys > keys: asymmetric: tpm2_asymmetric > > crypto/Kconfig | 7 + > crypto/Makefile | 6 + > crypto/asymmetric_keys/Kconfig | 17 + > crypto/asymmetric_keys/Makefile | 1 + > crypto/asymmetric_keys/tpm2_asymmetric.c | 1096 +++++++++++++++++++++ > crypto/tpm2_key.asn1 | 11 + > crypto/tpm2_key.c | 150 +++ > include/crypto/tpm2_key.h | 46 + > include/linux/asn1_encoder.h | 3 + > include/linux/tpm.h | 10 + > lib/asn1_encoder.c | 62 ++ > security/keys/trusted-keys/Kconfig | 2 +- > security/keys/trusted-keys/Makefile | 2 - > security/keys/trusted-keys/tpm2key.asn1 | 11 - > security/keys/trusted-keys/trusted_tpm2.c | 119 +-- > 15 files changed, 1421 insertions(+), 122 deletions(-) > create mode 100644 crypto/asymmetric_keys/tpm2_asymmetric.c > create mode 100644 crypto/tpm2_key.asn1 > create mode 100644 crypto/tpm2_key.c > create mode 100644 include/crypto/tpm2_key.h > delete mode 100644 security/keys/trusted-keys/tpm2key.asn1 > > -- > 2.47.3 >
There's some initial test code for this too: https://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd-test.git/tree/overlay/usr/local/bin/tpmdd_tpm2_asymmetric.sh?h=main Ugh, that's one hell of an url... BR, Jarkko

