Meenakshi Aggarwal a703a4c2a3 KEYS: trusted: caam based protected key ...

- CAAM supports two types of protected keys:
  -- Plain key encrypted with ECB
  -- Plain key encrypted with CCM
  Due to robustness, default encryption used for protected key is CCM.

- Generate protected key blob and add it to trusted key payload.
  This is done as part of sealing operation, which is triggered
  when below two operations are requested:
  -- new key generation
  -- load key,

Signed-off-by: Pankaj Gupta <pankaj.gupta@nxp.com>
Signed-off-by: Meenakshi Aggarwal <meenakshi.aggarwal@nxp.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>

2025-10-20 12:10:28 +08:00

..

apparmor

Merge tag 'pull-f_path' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2025-10-03 16:32:36 -07:00

bpf

bpf: lsm: Remove hook to bpf_task_storage_free

2024-12-16 12:32:31 -08:00

integrity

ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr

2025-10-03 07:50:56 -04:00

ipe

Merge tag 'ipe-pr-20250728' of git://git.kernel.org/pub/scm/linux/kernel/git/wufan/ipe

2025-07-31 09:42:20 -07:00

keys

KEYS: trusted: caam based protected key

2025-10-20 12:10:28 +08:00

landlock

fs: add an icount_read helper

2025-09-01 12:41:09 +02:00

loadpin

loadpin: remove MODULE_COMPRESS_NONE as it is no longer supported

2025-03-03 09:35:50 -08:00

lockdown

lockdown: initialize local array before use to quiet static analysis

2025-01-05 12:48:43 -05:00

safesetid

safesetid: check size of policy writes

2025-01-04 22:46:09 -05:00

selinux

Merge tag 'pull-qstr' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2025-10-03 11:14:02 -07:00

smack

Merge tag 'pull-qstr' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2025-10-03 11:14:02 -07:00

tomoyo

copy_process: pass clone_flags as u64 across calltree

2025-09-01 15:31:34 +02:00

yama

yama: don't abuse rcu_read_lock/get_task_struct in yama_task_prctl()

2025-03-07 19:58:05 -08:00

commoncap.c

exec: Correct the permission check for unsafe exec

2025-06-23 10:38:39 -05:00

device_cgroup.c

device_cgroup: Fix kernel-doc warnings in device_cgroup

2023-06-21 09:30:49 -04:00

inode.c

make securityfs_remove() remove the entire subtree

2025-06-11 18:19:46 -04:00

Kconfig

lsm: CONFIG_LSM can depend on CONFIG_SECURITY

2025-09-11 16:32:04 -04:00

Kconfig.hardening

rust: add bitmap API.

2025-09-22 15:52:44 -04:00

lsm_audit.c

net: Retire DCCP socket.

2025-04-11 18:58:10 -07:00

lsm_syscalls.c

lsm: use 32-bit compatible data types in LSM syscalls

2024-03-14 11:31:26 -04:00

Makefile

lsm: Only build lsm_audit.c if CONFIG_SECURITY and CONFIG_AUDIT are set

2025-01-04 11:50:44 -05:00

min_addr.c

security: use umax() to improve code

2025-08-18 15:41:47 -04:00

security.c

Merge tag 'pull-qstr' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs

2025-10-03 11:14:02 -07:00