RE: [EXT] Re: [RFC PATCH HBK: 6/8] KEYS: trusted: caam based black key

From: Pankaj Gupta
Date: Wed Sep 07 2022 - 03:24:13 EST




> -----Original Message-----
> From: Ben Boeckel <me@xxxxxxxxxxxxxx>
> Sent: Tuesday, September 6, 2022 6:34 PM
> To: Pankaj Gupta <pankaj.gupta@xxxxxxx>
> Cc: jarkko@xxxxxxxxxx; a.fatoum@xxxxxxxxxxxxxx; Jason@xxxxxxxxx;
> jejb@xxxxxxxxxxxxx; zohar@xxxxxxxxxxxxx; dhowells@xxxxxxxxxx;
> sumit.garg@xxxxxxxxxx; david@xxxxxxxxxxxxx; michael@xxxxxxxx;
> john.ernberg@xxxxxxxx; jmorris@xxxxxxxxx; serge@xxxxxxxxxx;
> herbert@xxxxxxxxxxxxxxxxxxx; davem@xxxxxxxxxxxxx;
> j.luebbe@xxxxxxxxxxxxxx; ebiggers@xxxxxxxxxx; richard@xxxxxx;
> keyrings@xxxxxxxxxxxxxxx; linux-crypto@xxxxxxxxxxxxxxx; linux-
> integrity@xxxxxxxxxxxxxxx; linux-kernel@xxxxxxxxxxxxxxx; linux-security-
> module@xxxxxxxxxxxxxxx; Sahil Malhotra <sahil.malhotra@xxxxxxx>; Kshitiz
> Varshney <kshitiz.varshney@xxxxxxx>; Horia Geanta
> <horia.geanta@xxxxxxx>; Varun Sethi <V.Sethi@xxxxxxx>
> Subject: [EXT] Re: [RFC PATCH HBK: 6/8] KEYS: trusted: caam based black key
>
> Caution: EXT Email
>
> On Tue, Sep 06, 2022 at 12:21:55 +0530, Pankaj Gupta wrote:
> > - CAAM supports two types of black keys:
>
> What is a "black key"?
This needs to be changed to Hardware Bound Key.

Black Key is NXP terminology for Hardware Bound Key.

>
> > -- Plain key encrypted with ECB
> > -- Plain key encrypted with CCM
> > Note: Due to robustness, default encytption used for black key is CCM.
> ^^^^^^^^^^
>
> "encryption"

Accepted

>
> > - A black key blob is generated, and added to trusted key payload.
>
> Missing "the" before "trusted".
>
Accepted
> --Ben