Re: [tpmdd-devel] [PATCH] tpm: add session handles to the save and restore of the tpm2 space manager

From	Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com>
Newsgroups	linux.kernel
Subject	Re: [tpmdd-devel] [PATCH] tpm: add session handles to the save and restore of the tpm2 space manager
Date	2017-01-17 17:30 +0100
Message-ID	<t0ENX-SA-9@gated-at.bofh.it> (permalink)
References	<sZfHX-4Lq-15@gated-at.bofh.it> <t0coG-7kg-25@gated-at.bofh.it> <t0oJb-7x8-5@gated-at.bofh.it> <t0ENX-SA-11@gated-at.bofh.it>
Organization	Intel Finland Oy - BIC 0357606-4 - Westendinkatu 7, 02160 Espoo

Show all headers | View raw

On Tue, Jan 17, 2017 at 09:01:59AM -0500, Ken Goldman wrote:
> On 1/16/2017 6:18 PM, James Bottomley wrote:
> >
> > Basically this means that the advice to virtualize session handles
> > in the TCG RM document is wrong and we have to use physical handles.
> > I'll redo the implementation for this ... and now, since we'll have
> > nothing to use as an index, it probably does make sense to have
> > sessions in a separate array.  I can also separate isolation from
> > context switching ... although I really think this is less optimal:
> > my TPM only allows three active context handles, so if we don't
> > context switch them identically to transient object (which it also
> > only allows three of) I'm going to run out.  I actually redid my
> > openssl_tpm_engine patches so they use session handles for parameter
> > encryption and HMAC based authority, so this may end up biting me
> > soon ...
> 
> I think you have to context save sessions, just as you do with transient 
> objects.  Otherwise, only one process at a time can connect.

Isolation is self-contained step that can be tested and possible
regressions catched.

I could even consider landing isolation in one release and swapping in
subsequent in order to keep the release content more digestable for
upper layer maintainers and risk of causing major regressions small.

/Jarkko

Back to linux.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Re: [PATCH] tpm: add session handles to the save and restore of the  tpm2 space manager James Bottomley <jejb@linux.vnet.ibm.com> - 2017-01-17 00:20 +0100
  Re: [PATCH] tpm: add session handles to the save and restore of the  tpm2 space manager Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com> - 2017-01-17 08:30 +0100
    Re: [PATCH] tpm: add session handles to the save and restore of the  tpm2 space manager James Bottomley <jejb@linux.vnet.ibm.com> - 2017-01-17 15:20 +0100
      Re: [PATCH] tpm: add session handles to the save and restore of the  tpm2 space manager Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com> - 2017-01-17 17:40 +0100
  Re: [tpmdd-devel] [PATCH] tpm: add session handles to the save and  restore of the tpm2 space manager Jarkko Sakkinen <jarkko.sakkinen@linux.intel.com> - 2017-01-17 17:30 +0100

csiph-web