Messages in this thread | | | Subject | Re: [PATCH 1/5] PM / hibernate: Create snapshot keys handler | From | Randy Dunlap <> | Date | Wed, 12 Sep 2018 09:27:27 -0700 |
| |
Hi,
On 9/12/18 7:23 AM, Lee, Chun-Yi wrote: > diff --git a/kernel/power/Kconfig b/kernel/power/Kconfig > index 3a6c2f87699e..7c5c30149dbc 100644 > --- a/kernel/power/Kconfig > +++ b/kernel/power/Kconfig > @@ -76,6 +76,20 @@ config HIBERNATION > > For more information take a look at <file:Documentation/power/swsusp.txt>. > > +config HIBERNATION_ENC_AUTH > + bool "Hibernation encryption and authentication" > + depends on HIBERNATION > + depends on TRUSTED_KEYS > + select CRYPTO_AES > + select CRYPTO_HMAC > + select CRYPTO_SHA512 > + help > + This option will encrypt and authenticate the memory snapshot image > + of hibernation. It prevents that the snapshot image be arbitrary
arbitrarily
> + modified. User can use TPMs trusted key or user defined key as the
The user or A user can use the TPM's trusted key
> + master key of hibernation. The TPM trusted key depends on TPM. The > + security of user defined key relies on user space. > +
-- ~Randy
| |