--- v6
+++ v8
@@ -14,7 +14,7 @@
1 file changed, 171 insertions(+), 32 deletions(-)
diff --git a/Documentation/security/keys/trusted-encrypted.rst b/Documentation/security/keys/trusted-encrypted.rst
-index 9483a74..a355045 100644
+index 1da879a..16042c8 100644
--- a/Documentation/security/keys/trusted-encrypted.rst
+++ b/Documentation/security/keys/trusted-encrypted.rst
@@ -6,30 +6,161 @@ Trusted and Encrypted Keys are two new key types added to the existing kernel
@@ -198,7 +198,7 @@
With the IBM TSS 2 stack::
-@@ -79,14 +210,21 @@ TPM_STORED_DATA format. The key length for new keys are always in bytes.
+@@ -78,14 +209,21 @@ TPM_STORED_DATA format. The key length for new keys are always in bytes.
Trusted Keys can be 32 - 128 bytes (256 - 1024 bits), the upper limit is to fit
within the 2048 bit SRK (RSA) keylength, with all necessary structure/padding.
@@ -228,7 +228,7 @@
The decrypted portion of encrypted keys can contain either a simple symmetric
key or a more complex structure. The format of the more complex structure is
-@@ -104,8 +242,8 @@ Where::
+@@ -103,8 +241,8 @@ Where::
format:= 'default | ecryptfs | enc32'
key-type:= 'trusted' | 'user'
@@ -238,7 +238,7 @@
Create and save a trusted key named "kmk" of length 32 bytes.
-@@ -151,7 +289,7 @@ Load a trusted key from the saved blob::
+@@ -150,7 +288,7 @@ Load a trusted key from the saved blob::
f1f8fff03ad0acb083725535636addb08d73dedb9832da198081e5deae84bfaf0409c22b
e4a8aea2b607ec96931e6f4d4fe563ba
@@ -247,7 +247,7 @@
$ keyctl update 268728824 "update pcrinfo=`cat pcr.blob`"
$ keyctl print 268728824
-@@ -165,11 +303,12 @@ Reseal a trusted key under new pcr values::
+@@ -164,11 +302,12 @@ Reseal a trusted key under new pcr values::
7ef6a24defe4846104209bf0c3eced7fa1a672ed5b125fc9d8cd88b476a658a4434644ef
df8ae9a178e9f83ba9f08d10fa47e4226b98b0702f06b3b8