keys-encrypted · Supported

Maintainers

• M Mimi Zohar <zohar@linux.ibm.com>

Paths

• F Documentation/security/keys/trusted-encrypted.rst
• F include/keys/encrypted-type.h
• F security/keys/encrypted-keys/

Last 30 days

Recent patches

Most-recent 30 patches in this subsystem on linux-security-module (capped at 30), ordered by date desc.

• COOLING5d IN LINUX-NEXT [PATCH v3] KEYS: encrypted: fix integer overflow of datablob_len
  2026-09-09 · Cen Zhang <hidden>
• COLD19d [PATCH v2 09/10] keys/trusted_keys: enable PKWM wrapping key selection by label
  2026-08-31 · Srish Srinivasan <ssrish@linux.ibm.com>
• COLD23d [PATCH 7/8] keys/trusted_keys: enable PKWM wrapping key selection by label
  2026-08-27 · Srish Srinivasan <ssrish@linux.ibm.com>
• COOLING14d [PATCH v2] KEYS: encrypted: fix integer overflow of datablob_len
  2026-08-26 · Cen Zhang (Microsoft Security FORGE Labs) <hidden>
• COLD36d [PATCH v2 08/13] security/keys: implement wipe op for trusted and encrypted keys
  2026-08-11 · Jan Sebastian Götte <hidden>
• COLD33d [PATCH 4/4] security/keys: zeroize key payloads before kdump
  2026-07-31 · Jan Sebastian Götte <hidden>
• STALE107d IN LINUX-NEXT [PATCH next] keys: Replace strcpy(derived_buf, "AUTH_KEY") with strscpy(..., HASH_SIZE)
  2026-06-06 · <hidden>
• STALE208d REVIEWED: 5 (5M) [PATCH v6 6/6] docs: trusted-encryped: add PKWM as a new trust source
  2026-02-01 · Srish Srinivasan <ssrish@linux.ibm.com>
• STALE237d REVIEWED: 5 (5M) [PATCH v5 6/6] docs: trusted-encryped: add PKWM as a new trust source
  2026-01-27 · Srish Srinivasan <ssrish@linux.ibm.com>
• STALE242d REVIEWED: 5 (5M) [PATCH v4 6/6] docs: trusted-encryped: add PKWM as a new trust source
  2026-01-15 · Srish Srinivasan <ssrish@linux.ibm.com>
• STALE252d REVIEWED: 5 (5M) [PATCH v3 6/6] docs: trusted-encryped: add PKWM as a new trust source
  2026-01-06 · Srish Srinivasan <ssrish@linux.ibm.com>
• STALE260d [PATCH v2 6/6] docs: trusted-encryped: add PKWM as a new trust source
  2025-12-17 · Srish Srinivasan <ssrish@linux.ibm.com>
• STALE280d [PATCH 6/6] docs: trusted-encryped: add PKWM as a new trust source
  2025-12-13 · Srish Srinivasan <ssrish@linux.ibm.com>
• STALE313d [PATCH v2] KEYS: encrypted: Replace deprecated strcpy and improve get_derived_key
  2025-11-13 · Thorsten Blum <hidden>
• STALE308d [PATCH] KEYS: encrypted: Replace deprecated strcpy and improve get_derived_key
  2025-11-13 · Thorsten Blum <hidden>
• STALE306d [PATCH] KEYS: encrypted: Use pr_fmt()
  2025-11-13 · Thorsten Blum <hidden>
• STALE318d [PATCH] KEYS: encrypted: Return early on allocation failure and drop goto
  2025-10-29 · Thorsten Blum <hidden>
• DORMANTno replies [PATCH] KEYS: encrypted: Simplify determining 'format_len'
  2025-10-15 · Thorsten Blum <hidden>
• STALE343d REVIEWED: 19 (19M) [PATCH v3] keys: Replace deprecated strncpy in ecryptfs_fill_auth_tok
  2025-10-13 · Thorsten Blum <hidden>
• STALE343d [PATCH] keys: Remove redundant less-than-zero checks
  2025-10-11 · Thorsten Blum <hidden>
• STALE345d [PATCH v2] keys: Replace deprecated strncpy in ecryptfs_fill_auth_tok
  2025-10-10 · Thorsten Blum <hidden>
• STALE348d [PATCH] keys: Replace deprecated strncpy in ecryptfs_fill_auth_tok
  2025-10-09 · Thorsten Blum <hidden>
• STALE335d [PATCH] KEYS: encrypted: Use designated initializers for match_table_t structs
  2025-10-09 · Thorsten Blum <hidden>
• STALE814d [PATCH v3 2/2] KEYS: encrypted: add missing MODULE_DESCRIPTION()
  2024-06-07 · Jeff Johnson <hidden>
• STALE873d [PATCH v8 6/6] docs: trusted-encrypted: add DCP as new trust source
  2024-04-03 · David Gstir <david@sigma-star.at>
• STALE909d [PATCH v7 6/6] docs: trusted-encrypted: add DCP as new trust source
  2024-03-27 · David Gstir <david@sigma-star.at>
• STALE926d [PATCH v6 6/6] docs: trusted-encrypted: add DCP as new trust source
  2024-03-07 · David Gstir <david@sigma-star.at>
• STALE930d [PATCH v5 6/6] docs: trusted-encrypted: add DCP as new trust source
  2023-12-15 · David Gstir <david@sigma-star.at>
• STALE954d [PATCH] KEYS: encrypted: Add check for strsep
  2023-11-08 · Chen Ni <hidden>
• STALE1041d [PATCH v4 5/5] docs: trusted-encrypted: add DCP as new trust source
  2023-10-24 · David Gstir <david@sigma-star.at>

Quiet for 30+ days

Patches with no review trailers and no replies. Either the author is heads-down elsewhere or these slipped through. Oldest first.

• COLD36d [PATCH v2 08/13] security/keys: implement wipe op for trusted and encrypted keys
  2026-08-11 · Jan Sebastian Götte <hidden>