Re: [PATCH v5 8/9] keys/trusted_keys: enable PKWM wrapping key selection by label
flat view
From: sashiko-bot@kernel.org
Date: 2026-10-18 17:16:30
The PKWM trusted source currently uses the default wrapping key for all seal and unseal operations. However, PKWM supports multiple wrapping keys, enabling better isolation between trusted keys. Allow users to provide an active wrapping key of their choice created through sysfs when sealing trusted keys through a new wrapping_key=<label> option. If no label is specified, the default wrapping key is used for sealing. Signed-off-by: Srish Srinivasan <ssrish@linux.ibm.com>
Sashiko has reviewed this patch and found no issues. -- Sashiko AI review · https://sashiko.dev/#/patchset/20261018170844.491252-1-ssrish@linux.ibm.com?part=8