keys-encrypted · Supported

Maintainers

• M Mimi Zohar <zohar@linux.ibm.com>

Paths

• F Documentation/security/keys/trusted-encrypted.rst
• F include/keys/encrypted-type.h
• F security/keys/encrypted-keys/

Last 30 days

Most active threads (last 7 days)

• COOLING4d [PATCH v3 00/12] CRASH_MEMACTION: describe pages to a kdump kernel (was: CRASH_WIPE_SECRETS)
  2026-09-28 17:20 · 1 reply in 7d · Jan Sebastian Götte <hidden>

Recent patches

Most-recent 30 patches in this subsystem on linux-integrity (capped at 30), ordered by date desc.

• COOLING4d [PATCH v3 07/12] security/keys: Allocate key payloads from the secret pool
  2026-09-28 · Jan Sebastian Götte <hidden>
• COLD15d IN LINUX-NEXT [PATCH v3] KEYS: encrypted: fix integer overflow of datablob_len
  2026-09-09 · Cen Zhang <hidden>
• COLD29d [PATCH v2 09/10] keys/trusted_keys: enable PKWM wrapping key selection by label
  2026-08-31 · Srish Srinivasan <ssrish@linux.ibm.com>
• COLD32d [PATCH 7/8] keys/trusted_keys: enable PKWM wrapping key selection by label
  2026-08-27 · Srish Srinivasan <ssrish@linux.ibm.com>
• COLD23d [PATCH v2] KEYS: encrypted: fix integer overflow of datablob_len
  2026-08-26 · Cen Zhang (Microsoft Security FORGE Labs) <hidden>
• COLD45d [PATCH v2 08/13] security/keys: implement wipe op for trusted and encrypted keys
  2026-08-11 · Jan Sebastian Götte <hidden>
• COLD42d [PATCH 4/4] security/keys: zeroize key payloads before kdump
  2026-07-31 · Jan Sebastian Götte <hidden>
• STALE117d IN LINUX-NEXT [PATCH next] keys: Replace strcpy(derived_buf, "AUTH_KEY") with strscpy(..., HASH_SIZE)
  2026-06-06 · <hidden>
• STALE217d REVIEWED: 5 (5M) [PATCH v6 6/6] docs: trusted-encryped: add PKWM as a new trust source
  2026-02-01 · Srish Srinivasan <ssrish@linux.ibm.com>
• STALE246d REVIEWED: 5 (5M) [PATCH v5 6/6] docs: trusted-encryped: add PKWM as a new trust source
  2026-01-27 · Srish Srinivasan <ssrish@linux.ibm.com>
• STALE251d REVIEWED: 5 (5M) [PATCH v4 6/6] docs: trusted-encryped: add PKWM as a new trust source
  2026-01-15 · Srish Srinivasan <ssrish@linux.ibm.com>
• STALE261d REVIEWED: 5 (5M) [PATCH v3 6/6] docs: trusted-encryped: add PKWM as a new trust source
  2026-01-06 · Srish Srinivasan <ssrish@linux.ibm.com>
• STALE270d [PATCH v2 6/6] docs: trusted-encryped: add PKWM as a new trust source
  2025-12-17 · Srish Srinivasan <ssrish@linux.ibm.com>
• STALE290d [PATCH 6/6] docs: trusted-encryped: add PKWM as a new trust source
  2025-12-13 · Srish Srinivasan <ssrish@linux.ibm.com>
• STALE322d [PATCH v2] KEYS: encrypted: Replace deprecated strcpy and improve get_derived_key
  2025-11-13 · Thorsten Blum <hidden>
• STALE318d [PATCH] KEYS: encrypted: Replace deprecated strcpy and improve get_derived_key
  2025-11-13 · Thorsten Blum <hidden>
• STALE315d [PATCH] KEYS: encrypted: Use pr_fmt()
  2025-11-13 · Thorsten Blum <hidden>
• STALE328d [PATCH] KEYS: encrypted: Return early on allocation failure and drop goto
  2025-10-29 · Thorsten Blum <hidden>
• STALE349d [PATCH] docs: trusted-encrypted: fix htmldocs build error
  2025-10-17 · Gopi Krishna Menon <hidden>
• DORMANTno replies [PATCH] KEYS: encrypted: Simplify determining 'format_len'
  2025-10-15 · Thorsten Blum <hidden>
• STALE352d REVIEWED: 19 (19M) [PATCH v3] keys: Replace deprecated strncpy in ecryptfs_fill_auth_tok
  2025-10-13 · Thorsten Blum <hidden>
• STALE352d [PATCH] keys: Remove redundant less-than-zero checks
  2025-10-11 · Thorsten Blum <hidden>
• STALE354d [PATCH v2] keys: Replace deprecated strncpy in ecryptfs_fill_auth_tok
  2025-10-10 · Thorsten Blum <hidden>
• STALE357d [PATCH] keys: Replace deprecated strncpy in ecryptfs_fill_auth_tok
  2025-10-09 · Thorsten Blum <hidden>
• STALE344d [PATCH] KEYS: encrypted: Use designated initializers for match_table_t structs
  2025-10-09 · Thorsten Blum <hidden>
• STALE382d [PATCH] KEYS: encrypted: Use SHA-256 library instead of crypto_shash
  2025-07-31 · Eric Biggers <ebiggers@kernel.org>
• STALE543d [PATCH] docs: Remove literal markup from Documentation/ paths
  2025-04-04 · Nícolas F. R. A. Prado <hidden>
• STALE823d [PATCH v3 2/2] KEYS: encrypted: add missing MODULE_DESCRIPTION()
  2024-06-07 · Jeff Johnson <hidden>
• STALE805d [PATCH 5/6] KEYS: trusted: implement counter/timer policy
  2024-05-24 · James Bottomley <James.Bottomley@HansenPartnership.com>
• STALE805d [PATCH 4/6] KEYS: trusted: add ability to specify arbitrary policy
  2024-05-24 · James Bottomley <James.Bottomley@HansenPartnership.com>

Quiet for 30+ days

Patches with no review trailers and no replies. Either the author is heads-down elsewhere or these slipped through. Oldest first.

• COLD45d [PATCH v2 08/13] security/keys: implement wipe op for trusted and encrypted keys
  2026-08-11 · Jan Sebastian Götte <hidden>
• COLD32d [PATCH 7/8] keys/trusted_keys: enable PKWM wrapping key selection by label
  2026-08-27 · Srish Srinivasan <ssrish@linux.ibm.com>