Basic trusted keys support: auth value and SHA256.

v2:

* Removed all the changes that modify the existing functions to use
  the new struct tpm_buf. These changes should be done separately from
  this patch set as they require separate QA + review.
* 'keyhandle=' is now required for TPM2. Makes sense to always state
  the sealing key because there's no any fixed keys on the chip (thanks
  to Andreas Fuchs for this comment).
* I updated tpm_buf to a be heap based structure. Now there's one full
  page of memory for variable sized messages. Also the stack is greatly
  reduced.

Jarkko Sakkinen (4):
  tpm: introduce tpm_buf
  keys, trusted: move struct trusted_key_options to trusted-type.h
  tpm: seal/unseal for TPM 2.0
  keys, trusted: seal/unseal with TPM 2.0 chips

 drivers/char/tpm/tpm-interface.c |  76 ++++++++++++
 drivers/char/tpm/tpm.h           | 110 +++++++++++++++++
 drivers/char/tpm/tpm2-cmd.c      | 250 ++++++++++++++++++++++++++++++++++++++-
 include/keys/trusted-type.h      |  14 ++-
 include/linux/tpm.h              |  26 ++++
 security/keys/trusted.c          |  36 +++++-
 security/keys/trusted.h          |  11 --
 7 files changed, 507 insertions(+), 16 deletions(-)

-- 
2.5.0

--
To unsubscribe from this list: send the line "unsubscribe 
linux-security-module" in
the body of a message to majord...@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to