[PATCH v1 1/4] lib: hex2bin converts ascii hexadecimal string to binary

2010-10-07 Thread Mimi Zohar
Similar to the kgdb_hex2mem() code, hex2bin converts a string to binary using the hex_to_bin() library call. Signed-off-by: Mimi Zohar zo...@us.ibm.com --- include/linux/kernel.h |1 + lib/hexdump.c | 16 2 files changed, 17 insertions(+), 0 deletions(-) diff

[PATCH v1 2/4] key: add tpm_send command

2010-10-07 Thread Mimi Zohar
Add internal kernel tpm_send() command used to seal/unseal keys. Signed-off-by: David Safford saff...@watson.ibm.com Reviewd-by: Mimi Zohar zo...@watson.ibm.com Acked-by: Rajiv Andrade sra...@linux.vnet.ibm.com --- drivers/char/tpm/tpm.c | 17 + include/linux/tpm.h|3

[PATCH v1 3/4] keys: add new trusted key-type

2010-10-07 Thread Mimi Zohar
Defines a new kernel key-type called 'trusted'. Trusted keys are TPM generated random numbers, RSA sealed by the TPM, and only unsealed by the TPM, if boot PCRs and other criteria match. Trusted keys are created/encrypted/decrypted in the kernel. Userspace ever only sees/stores encrypted blobs.

[PATCH v1 4/4] keys: add new key-type encrypted

2010-10-07 Thread Mimi Zohar
Defines a new kernel key-type called 'encrypted'. Encrypted keys are kernel generated random numbers, which are encrypted/decrypted with a 'trusted' symmetric key. Encrypted keys are created/encrypted/decrypted in the kernel. Userspace only ever sees/stores encrypted blobs. Changelog: - wait

Re: [PATCH 1/2] keys: fixed handling of update method of the encrypted key type

2010-10-07 Thread Mimi Zohar
Nice! This patch applies cleanly to the trusted/encrypted patch set posted today. thanks, Acked-by: Mimi Zohar zo...@us.ibm.com On Thu, 2010-10-07 at 14:29 +0200, Roberto Sassu wrote: This patch adds the UPDATE keyword for encrypted key types: prevents updating existent keys if UPDATE is

Re: [PATCH 2/2] keys: added cleanup code for trusted and encrypted key types

2010-10-07 Thread James Morris
On Thu, 7 Oct 2010, Mimi Zohar wrote: Thanks for catching this! This patch applies cleanly to the trusted/encrypted patch set posted today. thanks, Acked-by: Mimi Zohar zo...@us.ibm.com It's probably best if you incorporate these fixes into your patches, so we don't commit known-broken