linux-kernel - [GIT PULL] TPM DEVICE DRIVER updates for v5.13

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:   Wed, 14 Apr 2021 16:58:00 +0300
From:   Jarkko Sakkinen <jarkko@...nel.org>
To:     Linus Torvalds <torvalds@...ux-foundation.org>
Cc:     linux-kernel@...r.kernel.org, linux-integrity@...r.kernel.org,
        jmorris@...ei.org, dhowells@...hat.com, peterhuewe@....de
Subject: [GIT PULL] TPM DEVICE DRIVER updates for v5.13

Hi,

New features:

1. ARM TEE backend for kernel trusted keys to complete the existing TPM
   backend.
2. ASN.1 format for TPM2 trusted keys to make them interact with the
   user space stack, such as OpenConnect VPN.

Other than that, contains bunch of bug fixes.

/Jarkko

The following changes since commit 50987beca096a7ed4f453a6da245fd6a2fadedeb:

  Merge tag 'trace-v5.12-rc7' of git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace (2021-04-13 18:40:00 -0700)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd.git/ tags/tpmdd-next-v5.13

for you to fetch changes up to aec00aa04b1131e17e6744681b380779f89d77b3:

  KEYS: trusted: Fix missing null return from kzalloc call (2021-04-14 16:30:31 +0300)

----------------------------------------------------------------
tpmdd updates for Linux v5.13

----------------------------------------------------------------
Colin Ian King (1):
      KEYS: trusted: Fix missing null return from kzalloc call

James Bottomley (5):
      lib: Add ASN.1 encoder
      oid_registry: Add TCG defined OIDS for TPM keys
      security: keys: trusted: fix TPM2 authorizations
      security: keys: trusted: use ASN.1 TPM2 key format for the blobs
      security: keys: trusted: Make sealed key properly interoperable

Stefan Berger (3):
      tpm: efi: Use local variable for calculating final log size
      tpm: acpi: Check eventlog signature before using it
      tpm: vtpm_proxy: Avoid reading host log when using a virtual device

Sumit Garg (4):
      KEYS: trusted: Add generic trusted keys framework
      KEYS: trusted: Introduce TEE based Trusted Keys
      doc: trusted-encrypted: updates with TEE as a new trust source
      MAINTAINERS: Add entry for TEE based Trusted Keys

Zhihao Cheng (1):
      char: tpm: fix error return code in tpm_cr50_i2c_tis_recv()

 Documentation/admin-guide/kernel-parameters.txt   |  12 +
 Documentation/security/keys/trusted-encrypted.rst | 229 +++++++++--
 MAINTAINERS                                       |   8 +
 drivers/char/tpm/eventlog/acpi.c                  |  33 +-
 drivers/char/tpm/eventlog/common.c                |   3 +
 drivers/char/tpm/eventlog/efi.c                   |  29 +-
 drivers/char/tpm/tpm_tis_i2c_cr50.c               |   1 +
 include/keys/trusted-type.h                       |  55 +++
 include/keys/trusted_tee.h                        |  16 +
 include/keys/trusted_tpm.h                        |  29 +-
 include/linux/asn1_encoder.h                      |  32 ++
 include/linux/oid_registry.h                      |   5 +
 include/linux/tpm.h                               |   2 +
 lib/Kconfig                                       |   3 +
 lib/Makefile                                      |   1 +
 lib/asn1_encoder.c                                | 454 ++++++++++++++++++++++
 security/keys/Kconfig                             |   3 +
 security/keys/trusted-keys/Makefile               |   6 +
 security/keys/trusted-keys/tpm2key.asn1           |  11 +
 security/keys/trusted-keys/trusted_core.c         | 360 +++++++++++++++++
 security/keys/trusted-keys/trusted_tee.c          | 318 +++++++++++++++
 security/keys/trusted-keys/trusted_tpm1.c         | 398 +++++--------------
 security/keys/trusted-keys/trusted_tpm2.c         | 269 +++++++++++--
 23 files changed, 1887 insertions(+), 390 deletions(-)
 create mode 100644 include/keys/trusted_tee.h
 create mode 100644 include/linux/asn1_encoder.h
 create mode 100644 lib/asn1_encoder.c
 create mode 100644 security/keys/trusted-keys/tpm2key.asn1
 create mode 100644 security/keys/trusted-keys/trusted_core.c
 create mode 100644 security/keys/trusted-keys/trusted_tee.c