Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.kernel > #1366960 > unrolled thread

Re: [PATCH] Security: Keys: Added derived keytype

Started byKirill Marinushkin <k.marinushkin@gmail.com>
First post2016-03-30 09:40 +0200
Last post2016-04-01 17:20 +0200
Articles 2 — 2 participants

Back to article view | Back to linux.kernel


Contents

  Re: [PATCH] Security: Keys: Added derived keytype Kirill Marinushkin <k.marinushkin@gmail.com> - 2016-03-30 09:40 +0200
    Re: [PATCH] Security: Keys: Added derived keytype David Howells <dhowells@redhat.com> - 2016-04-01 17:20 +0200

#1366960 — Re: [PATCH] Security: Keys: Added derived keytype

FromKirill Marinushkin <k.marinushkin@gmail.com>
Date2016-03-30 09:40 +0200
SubjectRe: [PATCH] Security: Keys: Added derived keytype
Message-ID<riiTn-24i-7@gated-at.bofh.it>
>> For details see
>> Documentation/security/keys-derived.txt
>
> Usage?
>
> David

You maybe didn't receive my answer sent from gmail web-interface, so I repeat it now from mutt.

Usages of derived keys that I can see:

kernel space:
    derive keys from "trusted" (with possibility to access from user space if proper permissions are set);
user space:
    store passwords within keyrings;
    randomly generated keys, keys with payload given as hex string.

What's your opinion on having derived keytype?

--
Best Regards,
Kirill Marinushkin

[toc] | [next] | [standalone]


#1369412

FromDavid Howells <dhowells@redhat.com>
Date2016-04-01 17:20 +0200
Message-ID<rj91E-6gd-11@gated-at.bofh.it>
In reply to#1366960
Kirill Marinushkin <k.marinushkin@gmail.com> wrote:

> kernel space:
>     derive keys from "trusted" (with possibility to access from user space if proper permissions are set);
> user space:
>     store passwords within keyrings;
>     randomly generated keys, keys with payload given as hex string.
> 
> What's your opinion on having derived keytype?

Ummm...  I'm not keen on the name; it doesn't really capture what the key is
for.

Apart from that, let me have another look through the patch.

David

[toc] | [prev] | [standalone]


Back to top | Article view | linux.kernel


csiph-web