Thread (71 messages) 71 messages, 13 authors, 2021-04-02

Re: [PATCH v1 3/3] KEYS: trusted: Introduce support for NXP CAAM-based trusted keys

flat view

From: Ahmad Fatoum <a.fatoum@pengutronix.de>
Date: 2021-04-01 07:42:13
Also in: keyrings, linux-crypto, linux-doc, linux-integrity, lkml

Hello Jarkko,

On 01.04.21 01:30, Jarkko Sakkinen wrote:
quoted
Option (C) sounds reasonable to me but I would rather prefer an info
message rather than warning as otherwise it would reflect that we are
enforcing kernel RNG choice for a user to trust upon.
I gave some though on this.

I take TEE as it is but I'd expect the CAAM patch set sort out this option
with some patch.
Is it ok to warn if a user requests vendor RNG with CAAM and default
to the kernel RNG? 

Cheers,
Ahmad

-- 
Pengutronix e.K.                           |                             |
Steuerwalder Str. 21                       | http://www.pengutronix.de/  |
31137 Hildesheim, Germany                  | Phone: +49-5121-206917-0    |
Amtsgericht Hildesheim, HRA 2686           | Fax:   +49-5121-206917-5555 |
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help