Re: [PATCH] tpm: add session handles to the save and restore of the tpm2 space manager

2017-01-17 Thread Jarkko Sakkinen
On Tue, Jan 17, 2017 at 06:18:12AM -0800, James Bottomley wrote: > On Tue, 2017-01-17 at 09:23 +0200, Jarkko Sakkinen wrote: > > On Mon, Jan 16, 2017 at 03:18:45PM -0800, James Bottomley wrote: > > > On Mon, 2017-01-16 at 12:04 +0200, Jarkko Sakkinen wrote: > > > > On Fri, Jan 13, 2017 at

Re: [PATCH] tpm: add session handles to the save and restore of the tpm2 space manager

2017-01-17 Thread Jarkko Sakkinen
On Tue, Jan 17, 2017 at 06:18:12AM -0800, James Bottomley wrote: > On Tue, 2017-01-17 at 09:23 +0200, Jarkko Sakkinen wrote: > > On Mon, Jan 16, 2017 at 03:18:45PM -0800, James Bottomley wrote: > > > On Mon, 2017-01-16 at 12:04 +0200, Jarkko Sakkinen wrote: > > > > On Fri, Jan 13, 2017 at

Re: [tpmdd-devel] [PATCH] tpm: add session handles to the save and restore of the tpm2 space manager

2017-01-17 Thread Jarkko Sakkinen
On Tue, Jan 17, 2017 at 09:01:59AM -0500, Ken Goldman wrote: > On 1/16/2017 6:18 PM, James Bottomley wrote: > > > > Basically this means that the advice to virtualize session handles > > in the TCG RM document is wrong and we have to use physical handles. > > I'll redo the implementation for this

Re: [tpmdd-devel] [PATCH] tpm: add session handles to the save and restore of the tpm2 space manager

2017-01-17 Thread Jarkko Sakkinen
On Tue, Jan 17, 2017 at 09:01:59AM -0500, Ken Goldman wrote: > On 1/16/2017 6:18 PM, James Bottomley wrote: > > > > Basically this means that the advice to virtualize session handles > > in the TCG RM document is wrong and we have to use physical handles. > > I'll redo the implementation for this

Re: [PATCH] tpm: add session handles to the save and restore of the tpm2 space manager

2017-01-17 Thread James Bottomley
On Tue, 2017-01-17 at 09:23 +0200, Jarkko Sakkinen wrote: > On Mon, Jan 16, 2017 at 03:18:45PM -0800, James Bottomley wrote: > > On Mon, 2017-01-16 at 12:04 +0200, Jarkko Sakkinen wrote: > > > On Fri, Jan 13, 2017 at 11:24:13AM -0800, James Bottomley wrote: > > > > Session handles are slightly

Re: [PATCH] tpm: add session handles to the save and restore of the tpm2 space manager

2017-01-17 Thread James Bottomley
On Tue, 2017-01-17 at 09:23 +0200, Jarkko Sakkinen wrote: > On Mon, Jan 16, 2017 at 03:18:45PM -0800, James Bottomley wrote: > > On Mon, 2017-01-16 at 12:04 +0200, Jarkko Sakkinen wrote: > > > On Fri, Jan 13, 2017 at 11:24:13AM -0800, James Bottomley wrote: > > > > Session handles are slightly

Re: [PATCH] tpm: add session handles to the save and restore of the tpm2 space manager

2017-01-16 Thread Jarkko Sakkinen
On Mon, Jan 16, 2017 at 03:18:45PM -0800, James Bottomley wrote: > On Mon, 2017-01-16 at 12:04 +0200, Jarkko Sakkinen wrote: > > On Fri, Jan 13, 2017 at 11:24:13AM -0800, James Bottomley wrote: > > > Session handles are slightly more difficult to manage because any > > > TPM > > > only has a

Re: [PATCH] tpm: add session handles to the save and restore of the tpm2 space manager

2017-01-16 Thread Jarkko Sakkinen
On Mon, Jan 16, 2017 at 03:18:45PM -0800, James Bottomley wrote: > On Mon, 2017-01-16 at 12:04 +0200, Jarkko Sakkinen wrote: > > On Fri, Jan 13, 2017 at 11:24:13AM -0800, James Bottomley wrote: > > > Session handles are slightly more difficult to manage because any > > > TPM > > > only has a

Re: [PATCH] tpm: add session handles to the save and restore of the tpm2 space manager

2017-01-16 Thread James Bottomley
On Mon, 2017-01-16 at 12:04 +0200, Jarkko Sakkinen wrote: > On Fri, Jan 13, 2017 at 11:24:13AM -0800, James Bottomley wrote: > > Session handles are slightly more difficult to manage because any > > TPM > > only has a finite number of allowed handles, even if the session > > has > > been saved; so

Re: [PATCH] tpm: add session handles to the save and restore of the tpm2 space manager

2017-01-16 Thread James Bottomley
On Mon, 2017-01-16 at 12:04 +0200, Jarkko Sakkinen wrote: > On Fri, Jan 13, 2017 at 11:24:13AM -0800, James Bottomley wrote: > > Session handles are slightly more difficult to manage because any > > TPM > > only has a finite number of allowed handles, even if the session > > has > > been saved; so

Re: [PATCH] tpm: add session handles to the save and restore of the tpm2 space manager

2017-01-16 Thread Jarkko Sakkinen
On Mon, Jan 16, 2017 at 12:04:15PM +0200, Jarkko Sakkinen wrote: > On Fri, Jan 13, 2017 at 11:24:13AM -0800, James Bottomley wrote: > > Session handles are slightly more difficult to manage because any TPM > > only has a finite number of allowed handles, even if the session has > > been saved; so

Re: [PATCH] tpm: add session handles to the save and restore of the tpm2 space manager

2017-01-16 Thread Jarkko Sakkinen
On Mon, Jan 16, 2017 at 12:04:15PM +0200, Jarkko Sakkinen wrote: > On Fri, Jan 13, 2017 at 11:24:13AM -0800, James Bottomley wrote: > > Session handles are slightly more difficult to manage because any TPM > > only has a finite number of allowed handles, even if the session has > > been saved; so

Re: [PATCH] tpm: add session handles to the save and restore of the tpm2 space manager

2017-01-16 Thread Jarkko Sakkinen
On Fri, Jan 13, 2017 at 11:24:13AM -0800, James Bottomley wrote: > Session handles are slightly more difficult to manage because any TPM > only has a finite number of allowed handles, even if the session has > been saved; so when you context save a session, you must not flush it > because that

Re: [PATCH] tpm: add session handles to the save and restore of the tpm2 space manager

2017-01-16 Thread Jarkko Sakkinen
On Fri, Jan 13, 2017 at 11:24:13AM -0800, James Bottomley wrote: > Session handles are slightly more difficult to manage because any TPM > only has a finite number of allowed handles, even if the session has > been saved; so when you context save a session, you must not flush it > because that

[PATCH] tpm: add session handles to the save and restore of the tpm2 space manager

2017-01-13 Thread James Bottomley
Session handles are slightly more difficult to manage because any TPM only has a finite number of allowed handles, even if the session has been saved; so when you context save a session, you must not flush it because that would destroy the ability to context load it (you only flush sessions when

[PATCH] tpm: add session handles to the save and restore of the tpm2 space manager

2017-01-13 Thread James Bottomley
Session handles are slightly more difficult to manage because any TPM only has a finite number of allowed handles, even if the session has been saved; so when you context save a session, you must not flush it because that would destroy the ability to context load it (you only flush sessions when