]> Gentwo Git Trees - linux/.git/commit
KEYS: trusted: caam based protected key
authorMeenakshi Aggarwal <meenakshi.aggarwal@nxp.com>
Mon, 6 Oct 2025 07:17:52 +0000 (09:17 +0200)
committerHerbert Xu <herbert@gondor.apana.org.au>
Mon, 20 Oct 2025 04:10:28 +0000 (12:10 +0800)
commita703a4c2a3280835003d4d0eb8845bac0f1a6ef1
treec409df1b549b5855d64a45a46cd4b7ad176c14f6
parent38f6880759fdb3caabefb4014818b9c0a6592295
KEYS: trusted: caam based protected key

- CAAM supports two types of protected keys:
  -- Plain key encrypted with ECB
  -- Plain key encrypted with CCM
  Due to robustness, default encryption used for protected key is CCM.

- Generate protected key blob and add it to trusted key payload.
  This is done as part of sealing operation, which is triggered
  when below two operations are requested:
  -- new key generation
  -- load key,

Signed-off-by: Pankaj Gupta <pankaj.gupta@nxp.com>
Signed-off-by: Meenakshi Aggarwal <meenakshi.aggarwal@nxp.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
drivers/crypto/caam/blob_gen.c
drivers/crypto/caam/desc.h
include/soc/fsl/caam-blob.h
security/keys/trusted-keys/trusted_caam.c