Re: [PATCH v1 3/3] KEYS: trusted: Introduce support for NXP CAAM-based trusted keys
From: Eric Biggers <ebiggers@kernel.org>
Date: 2021-03-31 23:35:18
Also in:
keyrings, linux-crypto, linux-doc, linux-security-module, lkml
On Thu, Apr 01, 2021 at 02:31:46AM +0300, Jarkko Sakkinen wrote:
It's a bummer but uapi is the god in the end. Since TPM does not do it today, that behaviour must be supported forever. That's why a boot option AND a warning would be the best compromise.
It's not UAPI if there is no way for userspace to tell if it changed. - Eric