linux-kernel - Re: [PATCH] Security: Keys: Added derived keytype

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20160330073417.GA18597@gmail.com>
Date:	Wed, 30 Mar 2016 09:34:18 +0200
From:	Kirill Marinushkin <k.marinushkin@...il.com>
To:	dhowells@...hat.com
Cc:	linux-kernel@...r.kernel.org, keyrings@...r.kernel.org,
	linux-security-module@...r.kernel.org, k.marinushkin@...il.com
Subject: Re: [PATCH] Security: Keys: Added derived keytype

>> For details see
>> Documentation/security/keys-derived.txt
>
> Usage?
>
> David

You maybe didn't receive my answer sent from gmail web-interface, so I repeat it now from mutt.

Usages of derived keys that I can see:

kernel space:
    derive keys from "trusted" (with possibility to access from user space if proper permissions are set);
user space:
    store passwords within keyrings;
    randomly generated keys, keys with payload given as hex string.

What's your opinion on having derived keytype?

--
Best Regards,
Kirill Marinushkin