Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.kernel > #1239576

Re: [tpmdd-devel] [PATCH 4/4] keys, trusted: seal/unseal with TPM 2.0 chips

Show all headers | View raw

On Mon, Oct 05, 2015 at 01:36:18PM +0000, Fuchs, Andreas wrote:
> > It's still unnecessary functionality and increases the kernel image size
> > and every hack requires maintenance. It would probably end up needing
> > compilation flag as there exists efforts like:
> > 
> > https://tiny.wiki.kernel.org/
> > 
> > My simple and stupid solution does not *prevent* adding better
> > synchronization. I would go with that and implement access broker
> > properly and not for just one use case later on.
> 
> Unfortunately, I'm not able to write up some code for this myself atm.
> Other priorities unfortunately.
> 
> I was just pointing out, that the proposed patch will not fit in with
> the current approach in TSS2.0, before this user-facing kernel API is
> set in stone and _corrected_ new syscalls need to be added later.

Why you would want new system calls? Do you know how hard it is to get
new system calls accepted? It's usually nearly impossible to get new
system calls in. You are going wrong direction there.

I do not see why couldn't survive in TSS 2.0 implementation for a while
without in-kernel access broker even if the world isn't perfect and
improve from that when the support becomes available. I'm not frankly
following your rationale here.

On the other hand I see use for the kernel images without access broker
in small embdedded devices.

I CC'd to Will Arthur as he has been working with TSS 2.0 for along
time just in case.

> Also, the pseudo-code proposal should be a proper minimal access broker
> that should solve most accesses to TPM transient objects down the road.
> Session-brokering is a different beast of course.

I don't mean to be rude but pseudo code doesn't matter much. We know
what is required from an access broker in terms of TPM 2.0 commands and
locking. Only working code matters at this point.

I still don't see why you couldn't add access broker later on. The patch
set does not make the API worse than it is right now.

> Cheers,
> Andreas

/Jarkko
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Back to linux.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

[PATCH 4/4] keys, trusted: seal/unseal with TPM 2.0 chips Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com> - 2015-10-02 10:40 +0200
  RE: [tpmdd-devel] [PATCH 4/4] keys, trusted: seal/unseal with TPM  2.0 chips "Fuchs, Andreas" <andreas.fuchs@sit.fraunhofer.de> - 2015-10-03 12:10 +0200
    Re: [tpmdd-devel] [PATCH 4/4] keys, trusted: seal/unseal with TPM  2.0 chips Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com> - 2015-10-03 12:30 +0200
      Re: [tpmdd-devel] [PATCH 4/4] keys, trusted: seal/unseal with TPM  2.0 chips Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com> - 2015-10-03 12:40 +0200
      RE: [tpmdd-devel] [PATCH 4/4] keys, trusted: seal/unseal with TPM  2.0 chips "Fuchs, Andreas" <andreas.fuchs@sit.fraunhofer.de> - 2015-10-04 21:00 +0200
        Re: [tpmdd-devel] [PATCH 4/4] keys, trusted: seal/unseal with TPM  2.0 chips Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com> - 2015-10-05 10:40 +0200
          RE: [tpmdd-devel] [PATCH 4/4] keys, trusted: seal/unseal with TPM  2.0 chips "Fuchs, Andreas" <andreas.fuchs@sit.fraunhofer.de> - 2015-10-05 11:10 +0200
            Re: [tpmdd-devel] [PATCH 4/4] keys, trusted: seal/unseal with TPM  2.0 chips Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com> - 2015-10-05 14:00 +0200
              RE: [tpmdd-devel] [PATCH 4/4] keys, trusted: seal/unseal with TPM  2.0 chips "Fuchs, Andreas" <andreas.fuchs@sit.fraunhofer.de> - 2015-10-05 14:30 +0200
                Re: [tpmdd-devel] [PATCH 4/4] keys, trusted: seal/unseal with TPM  2.0 chips Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com> - 2015-10-05 15:20 +0200
                RE: [tpmdd-devel] [PATCH 4/4] keys, trusted: seal/unseal with TPM  2.0 chips "Fuchs, Andreas" <andreas.fuchs@sit.fraunhofer.de> - 2015-10-05 15:40 +0200
                Re: [tpmdd-devel] [PATCH 4/4] keys, trusted: seal/unseal with TPM  2.0 chips Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com> - 2015-10-05 16:00 +0200
                RE: [tpmdd-devel] [PATCH 4/4] keys, trusted: seal/unseal with TPM  2.0 chips "Fuchs, Andreas" <andreas.fuchs@sit.fraunhofer.de> - 2015-10-05 16:20 +0200
                Re: [tpmdd-devel] [PATCH 4/4] keys, trusted: seal/unseal with TPM  2.0 chips Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com> - 2015-10-05 16:30 +0200
                RE: [tpmdd-devel] [PATCH 4/4] keys, trusted: seal/unseal with TPM  2.0 chips "Arthur, Will C" <will.c.arthur@intel.com> - 2015-10-05 17:30 +0200
                RE: [tpmdd-devel] [PATCH 4/4] keys, trusted: seal/unseal with TPM  2.0 chips "Fuchs, Andreas" <andreas.fuchs@sit.fraunhofer.de> - 2015-10-06 08:30 +0200
                Re: [tpmdd-devel] [PATCH 4/4] keys, trusted: seal/unseal with TPM  2.0 chips Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com> - 2015-10-06 14:30 +0200
                RE: [tpmdd-devel] [PATCH 4/4] keys, trusted: seal/unseal with TPM  2.0 chips "Fuchs, Andreas" <andreas.fuchs@sit.fraunhofer.de> - 2015-10-06 15:20 +0200
                Re: [tpmdd-devel] [PATCH 4/4] keys, trusted: seal/unseal with TPM  2.0 chips Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com> - 2015-10-06 17:10 +0200
                RE: [tpmdd-devel] [PATCH 4/4] keys, trusted: seal/unseal with TPM  2.0 chips "Fuchs, Andreas" <andreas.fuchs@sit.fraunhofer.de> - 2015-10-07 12:10 +0200
                Re: [tpmdd-devel] [PATCH 4/4] keys, trusted: seal/unseal with TPM  2.0 chips Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com> - 2015-10-07 12:30 +0200
                RE: [tpmdd-devel] [PATCH 4/4] keys, trusted: seal/unseal with TPM  2.0 chips "Fuchs, Andreas" <andreas.fuchs@sit.fraunhofer.de> - 2015-10-07 12:40 +0200
                Re: [tpmdd-devel] [PATCH 4/4] keys, trusted: seal/unseal with TPM  2.0 chips Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com> - 2015-10-07 13:20 +0200

csiph-web