[prev in list] [next in list] [prev in thread] [next in thread] 

List:       linux-keyrings
Subject:    Re: [RFC PATCH 2/2] KEYS: implement derived keys
From:       "Jarkko Sakkinen" <jarkko () kernel ! org>
Date:       2024-05-15 12:03:15
Message-ID: D1A7BZNCNPW8.281BRWPJVW0JX () kernel ! org
[Download RAW message or body]

On Wed May 15, 2024 at 3:00 PM EEST, Jarkko Sakkinen wrote:
> I did as much clarification as I possibly can.
>
> Also, if you look at confidential computing platforms there's exactly
> two assets that they use lock into machine:
>
> - Binary
> - CPU material
>
> Only carved into stone immutable material for key derivation.
>
> You can use mm_struct->exe_file binary if that will work out for you.
> I'm done with this version.

Pretty good case for having SGX, TDX and SNP in something else than just
Xeon's and EPYC's ;-)

But yeah within time limits I have I've used more quota for this
than I should have.

I look at +1 (if there is one).

BR, Jarkko

[prev in list] [next in list] [prev in thread] [next in thread]