Messages in this thread |  | | Subject | Re: [RFC 0/1] ima/evm: signature verification support using asymmetric keys | From | Mimi Zohar <> | Date | Fri, 18 Jan 2013 10:16:38 -0500 |
| |
On Thu, 2013-01-17 at 18:03 +0000, David Howells wrote:
> I would also like to have a look at altering your trusted key type[*] to be a > subtype of asymmetric keys so that the asymmetric key type can cover keys from > more sources: > > - Compiled-in keys. > - Keys from UEFI db. > - Keys from TPM (ie. the trusted key stuff). > - Keys loaded by the administrator _if_ they are validated by a key the > kernel already has. > > [*] I believe that that's your asymmetric key type and that your encrypted key > type is your symmetric key type.
Both trusted and encrypted keys are random number symmetric keys. Trusted keys are random number symmetric keys, generated and RSA-sealed by the TPM.
Mimi
|  |