Messages in this thread | | | Subject | Re: [PATCH v2 1/2] security/keys/secure_key: Adds the secure key support based on CAAM. | From | Mimi Zohar <> | Date | Fri, 03 Aug 2018 11:23:35 -0400 |
| |
On Fri, 2018-08-03 at 15:55 +0100, David Howells wrote: > Mimi Zohar <zohar@linux.ibm.com> wrote: > > > "trusted" keys are currently being used to decrypt other keys (eg. > > encrypted, ecryptfs, ...). > > Can it decrypt both symmetric and asymmetric keys?
Yes, the "trusted" key is returned to the caller and is used to decrypt a datablob.
For an example, refer to encrypted_key_decrypt(). The call to request_master_key() returns either the "trusted" or "user" type key, which is used to decrypt the "enccrypted" key type.
Mimi
| |