Messages in this thread | | | From | Kshitiz Varshney <> | Subject | RE: [EXT] [PATCH v8 3/6] KEYS: trusted: Introduce NXP DCP-backed trusted keys | Date | Wed, 10 Apr 2024 07:13:35 +0000 |
| |
Hi Ahmad,
> -----Original Message----- > From: Ahmad Fatoum <a.fatoum@pengutronix.de> > Sent: Tuesday, April 9, 2024 10:58 PM > To: Kshitiz Varshney <kshitiz.varshney@nxp.com>; David Gstir > <david@sigma-star.at>; Mimi Zohar <zohar@linux.ibm.com>; James > Bottomley <jejb@linux.ibm.com>; Jarkko Sakkinen <jarkko@kernel.org>; > Herbert Xu <herbert@gondor.apana.org.au>; David S. Miller > <davem@davemloft.net> > Cc: linux-doc@vger.kernel.org; Gaurav Jain <gaurav.jain@nxp.com>; Catalin > Marinas <catalin.marinas@arm.com>; David Howells > <dhowells@redhat.com>; keyrings@vger.kernel.org; Fabio Estevam > <festevam@gmail.com>; Paul Moore <paul@paul-moore.com>; Jonathan > Corbet <corbet@lwn.net>; Richard Weinberger <richard@nod.at>; Rafael J. > Wysocki <rafael.j.wysocki@intel.com>; James Morris <jmorris@namei.org>; > dl-linux-imx <linux-imx@nxp.com>; Serge E. Hallyn <serge@hallyn.com>; > Paul E. McKenney <paulmck@kernel.org>; Sascha Hauer > <s.hauer@pengutronix.de>; Pankaj Gupta <pankaj.gupta@nxp.com>; sigma > star Kernel Team <upstream+dcp@sigma-star.at>; Steven Rostedt (Google) > <rostedt@goodmis.org>; David Oberhollenzer <david.oberhollenzer@sigma- > star.at>; linux-arm-kernel@lists.infradead.org; linuxppc-dev@lists.ozlabsorg; > Randy Dunlap <rdunlap@infradead.org>; linux-kernel@vger.kernel.org; Li > Yang <leoyang.li@nxp.com>; linux-security-module@vger.kernel.org; linux- > crypto@vger.kernel.org; Pengutronix Kernel Team <kernel@pengutronix.de>; > Tejun Heo <tj@kernel.org>; linux-integrity@vger.kernel.org; Shawn Guo > <shawnguo@kernel.org>; Varun Sethi <V.Sethi@nxp.com> > Subject: Re: [EXT] [PATCH v8 3/6] KEYS: trusted: Introduce NXP DCP-backed > trusted keys > > Caution: This is an external email. Please take care when clicking links or > opening attachments. When in doubt, report the message using the 'Report > this email' button > > > Hello Kshitiz, > > On 09.04.24 12:54, Kshitiz Varshney wrote: > > Hi David, > >> + b->fmt_version = DCP_BLOB_VERSION; > >> + get_random_bytes(b->nonce, AES_KEYSIZE_128); > >> + get_random_bytes(b->blob_key, AES_KEYSIZE_128); > > > > We can use HWRNG instead of using kernel RNG. Please refer > > drivers/char/hw_random/imx-rngc.c > > imx-rngc can be enabled and used to seed the kernel entropy pool. Adding > direct calls into imx-rngc here only introduces duplicated code at no extra > benefit. > > Cheers, > Ahmad > > -- > Pengutronix e.K. | | > Steuerwalder Str. 21 | > https://eur01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww. > pengutronix.de%2F&data=05%7C02%7Ckshitiz.varshney%40nxp.com%7Ce9 > 97f259d34548ad1a9808dc58ba63a8%7C686ea1d3bc2b4c6fa92cd99c5c30 > 1635%7C0%7C0%7C638482804763047266%7CUnknown%7CTWFpbGZsb3 > d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0 > %3D%7C0%7C%7C%7C&sdata=UZgE9MXqAqCwqVnWty67YLh8QnIwpuq%2 > F7%2BQeDLQhF8I%3D&reserved=0 | > 31137 Hildesheim, Germany | Phone: +49-5121-206917-0 | > Amtsgericht Hildesheim, HRA 2686 | Fax: +49-5121-206917-5555 |
Understood.
Regards, Kshitiz
| |