keys-trusted · Supported

Maintainers

• M James Bottomley <James.Bottomley@HansenPartnership.com>
• M Jarkko Sakkinen <jarkko@kernel.org>
• M Mimi Zohar <zohar@linux.ibm.com>

Paths

• F Documentation/security/keys/trusted-encrypted.rst
• F include/keys/trusted-type.h
• F include/keys/trusted_tpm.h
• F security/keys/trusted-keys/

Last 30 days

Most active threads (last 7 days)

• WARM1d REVIEWED: 1 (1M) [PATCH v3] keys/trusted_keys: reuse TPM version in option handling
  2026-10-05 06:27 · 0 replies in 7d · Srish Srinivasan <ssrish@linux.ibm.com>
• HOTtoday REVIEWED: 1 (1M) [PATCH v2] keys/trusted_keys: reuse TPM version in option handling
  2026-10-02 07:11 · 0 replies in 7d · Srish Srinivasan <ssrish@linux.ibm.com>
• COOLING4d REVIEWED: 1 (1M) [PATCH] keys/trusted_keys: reuse TPM version in option handling
  2026-09-30 06:03 · 0 replies in 7d · Srish Srinivasan <ssrish@linux.ibm.com>

Active reviewers (last 30 days)

• Jarkko Sakkinen <jarkko@kernel.org>
  7 attestations (7 Reviewed-by) · last on 2026-09-16
• Stefan Berger <stefanb@linux.ibm.com>
  5 attestations (5 Reviewed-by) · last on 2026-10-05

Recent patches

Most-recent 30 patches in this subsystem on linux-security-module (capped at 30), ordered by date desc.

• WARM1d REVIEWED: 1 (1M) [PATCH v3] keys/trusted_keys: reuse TPM version in option handling
  2026-10-05 · Srish Srinivasan <ssrish@linux.ibm.com>
• HOTtoday REVIEWED: 1 (1M) [PATCH v2] keys/trusted_keys: reuse TPM version in option handling
  2026-10-02 · Srish Srinivasan <ssrish@linux.ibm.com>
• COOLING4d REVIEWED: 1 (1M) [PATCH] keys/trusted_keys: reuse TPM version in option handling
  2026-09-30 · Srish Srinivasan <ssrish@linux.ibm.com>
• COOLING7d [PATCH v3 07/12] security/keys: Allocate key payloads from the secret pool
  2026-09-28 · Jan Sebastian Götte <hidden>
• COOLING4d [PATCH v3] keys/trusted/tpm2: Validate TPM2_Create object sizes separately
  2026-09-26 · Srish Srinivasan <ssrish@linux.ibm.com>
• COOLING10d [PATCH] KEYS: trusted: Reject short TPM2 public areas
  2026-09-25 · Daehyeon Ko <hidden>
• COOLING10d [PATCH] KEYS: trusted: Fix blob allocation size in tpm2_key_decode()
  2026-09-23 · Stefano Garzarella <sgarzare@redhat.com>
• COOLING5d REVIEWED: 5 (5M) [PATCH v4 09/13] security: keys: trusted: always clear the hmac_sha1_ctx before returning
  2026-09-16 · Thomas Huth <hidden>
• COLD18d REVIEWED: 6 (6M) [PATCH v9 2/2] keys/trusted_keys: move TPM-specific fields into struct trusted_key_tpm
  2026-09-12 · Srish Srinivasan <ssrish@linux.ibm.com>
• COLD18d REVIEWED: 5 (5M) [PATCH v9 1/2] keys/trusted_keys: return immediately after TPM unseal failure
  2026-09-12 · Srish Srinivasan <ssrish@linux.ibm.com>
• COLD25d REVIEWED: 5 (5M) [PATCH v3 09/13] security: keys: trusted: always clear the hmac_sha1_ctx before returning
  2026-09-10 · Thomas Huth <hidden>
• COOLING10d [PATCH v2] keys/trusted/tpm2: Validate TPM2_Create object sizes separately
  2026-09-10 · Srish Srinivasan <ssrish@linux.ibm.com>
• COLD18d REVIEWED: 6 (6M) [PATCH v8 2/2] keys/trusted_keys: move TPM-specific fields into struct trusted_key_tpm
  2026-09-10 · Srish Srinivasan <ssrish@linux.ibm.com>
• COLD18d REVIEWED: 5 (5M) [PATCH v3 1/2] keys/trusted_keys: return immediately after TPM unseal failure
  2026-09-10 · Srish Srinivasan <ssrish@linux.ibm.com>
• COLD25d REVIEWED: 5 (5M) [PATCH v2 09/13] security: keys: trusted: always clear the hmac_sha1_ctx before returning
  2026-09-09 · Thomas Huth <hidden>
• COLD24d REVIEWED: 1 (1M) [PATCH v7 2/2] keys/trusted_keys: move TPM-specific fields into struct trusted_key_tpm
  2026-09-02 · Srish Srinivasan <ssrish@linux.ibm.com>
• COLD24d [PATCH v2 1/2] keys/trusted_keys: return immediately after TPM unseal failure
  2026-09-02 · Srish Srinivasan <ssrish@linux.ibm.com>
• COLD26d [PATCH] keys/trusted/tpm2: Validate TPM2_Create object sizes separately
  2026-09-02 · Srish Srinivasan <ssrish@linux.ibm.com>
• COLD26d REVIEWED: 1 (1M) [PATCH v6 2/2] keys/trusted_keys: move TPM-specific fields into struct trusted_key_tpm
  2026-09-02 · Srish Srinivasan <ssrish@linux.ibm.com>
• COLD26d [PATCH 1/2] keys/trusted_keys: return immediately after TPM unseal failure
  2026-09-02 · Srish Srinivasan <ssrish@linux.ibm.com>
• COLD18d IN LINUX-NEXT [PATCH] KEYS: trusted: Fix tpm2_load_cmd() boundary check
  2026-09-01 · Jarkko Sakkinen <jarkko@kernel.org>
• COLD33d REVIEWED: 1 (1M) [PATCH v5] keys/trusted_keys: move TPM-specific fields into struct trusted_key_tpm
  2026-09-01 · Srish Srinivasan <ssrish@linux.ibm.com>
• COLD32d [PATCH v2 09/10] keys/trusted_keys: enable PKWM wrapping key selection by label
  2026-08-31 · Srish Srinivasan <ssrish@linux.ibm.com>
• COLD32d [PATCH v2 04/10] keys/trusted_keys: propagate wrapping key generation errors
  2026-08-31 · Srish Srinivasan <ssrish@linux.ibm.com>
• COLD32d [PATCH v2 03/10] pseries/plpks: improve type consistency and parameter validation
  2026-08-31 · Srish Srinivasan <ssrish@linux.ibm.com>
• COLD34d REVIEWED: 1 (1M) [PATCH v4] keys/trusted_keys: move TPM-specific fields into trusted_tpm_options
  2026-08-29 · Srish Srinivasan <ssrish@linux.ibm.com>
• COLD35d [PATCH 7/8] keys/trusted_keys: enable PKWM wrapping key selection by label
  2026-08-27 · Srish Srinivasan <ssrish@linux.ibm.com>
• COLD35d [PATCH 3/8] pseries/plpks: improve type consistency and parameter validation
  2026-08-27 · Srish Srinivasan <ssrish@linux.ibm.com>
• COLD46d [PATCH 2/3] security: keys: trusted: always clear the hmac_sha1_ctx before returning
  2026-08-12 · Thomas Huth <hidden>
• COLD48d [PATCH v2 08/13] security/keys: implement wipe op for trusted and encrypted keys
  2026-08-11 · Jan Sebastian Götte <hidden>

Needs attention (review trailers in, no pickup)

Patches with review trailers that haven't landed in mainline and haven't been Acked by a maintainer. Oldest first.

• STALE173d REVIEWED: 4 (4M) [PATCH v4] KEYS: trusted: Debugging as a feature
  2026-04-15 · Jarkko Sakkinen <jarkko@kernel.org> · 1 Reviewed-by, 1 Tested-by
• STALE129d REVIEWED: 1 (1M) [PATCH] tpm-buf: memory-safe allocations
  2026-05-22 · Jarkko Sakkinen <jarkko@kernel.org> · 1 Reviewed-by
• STALE136d REVIEWED: 1 (1M) [PATCH v3] keys/trusted_keys: move TPM-specific fields into trusted_tpm_options
  2026-05-22 · Srish Srinivasan <ssrish@linux.ibm.com> · 1 Reviewed-by
• COLD34d REVIEWED: 1 (1M) [PATCH v4] keys/trusted_keys: move TPM-specific fields into trusted_tpm_options
  2026-08-29 · Srish Srinivasan <ssrish@linux.ibm.com> · 1 Reviewed-by
• COLD33d REVIEWED: 1 (1M) [PATCH v5] keys/trusted_keys: move TPM-specific fields into struct trusted_key_tpm
  2026-09-01 · Srish Srinivasan <ssrish@linux.ibm.com> · 1 Reviewed-by
• COLD25d REVIEWED: 5 (5M) [PATCH v3 09/13] security: keys: trusted: always clear the hmac_sha1_ctx before returning
  2026-09-10 · Thomas Huth <hidden> · 1 Reviewed-by
• COLD18d REVIEWED: 6 (6M) [PATCH v9 2/2] keys/trusted_keys: move TPM-specific fields into struct trusted_key_tpm
  2026-09-12 · Srish Srinivasan <ssrish@linux.ibm.com> · 2 Reviewed-by
• COOLING5d REVIEWED: 5 (5M) [PATCH v4 09/13] security: keys: trusted: always clear the hmac_sha1_ctx before returning
  2026-09-16 · Thomas Huth <hidden> · 1 Reviewed-by

Quiet for 30+ days

Patches with no review trailers and no replies. Either the author is heads-down elsewhere or these slipped through. Oldest first.

• STALE134d [PATCH v8 2/3] crypto: Migrate TPMKey ASN.1 objects from trusted-keys
  2026-05-24 · Jarkko Sakkinen <jarkko@kernel.org>
• COLD48d [PATCH v2 08/13] security/keys: implement wipe op for trusted and encrypted keys
  2026-08-11 · Jan Sebastian Götte <hidden>
• COLD46d [PATCH 2/3] security: keys: trusted: always clear the hmac_sha1_ctx before returning
  2026-08-12 · Thomas Huth <hidden>
• COLD35d [PATCH 3/8] pseries/plpks: improve type consistency and parameter validation
  2026-08-27 · Srish Srinivasan <ssrish@linux.ibm.com>
• COLD35d [PATCH 7/8] keys/trusted_keys: enable PKWM wrapping key selection by label
  2026-08-27 · Srish Srinivasan <ssrish@linux.ibm.com>