Paul:

Thanks for this work.  5x across all of the functions is really nice.
> 
> Finally, I would like this core to directly fetch the KEK from the
> MKM, rather than continuing to require the caller to fetch the KEK via
> the mkmif core, and feed it right back to the keywrap core. Keeping
> the KEK out of RAM can only improve the security of the device.

This seems hight desirable to me.

Russ

_______________________________________________
Tech mailing list
[email protected]
https://lists.cryptech.is/listinfo/tech

Reply via email to