linux-kernel - Re: [RFC PATCH v3 07/13] keys: Add ability to track intended usage of the public key

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <6f7120f292a7863e7c69d3cb49f224efd12ee629.camel@linux.ibm.com>
Date: Wed, 12 Feb 2025 07:42:59 -0500
From: Mimi Zohar <zohar@...ux.ibm.com>
To: Jarkko Sakkinen <jarkko.sakkinen@...nel.org>,
        Eric Snowberg
	 <eric.snowberg@...cle.com>
Cc: linux-security-module@...r.kernel.org, dhowells@...hat.com,
        dwmw2@...radead.org, herbert@...dor.apana.org.au, davem@...emloft.net,
        ardb@...nel.org, paul@...l-moore.com, jmorris@...ei.org,
        serge@...lyn.com, roberto.sassu@...wei.com, dmitry.kasatkin@...il.com,
        mic@...ikod.net, casey@...aufler-ca.com, stefanb@...ux.ibm.com,
        ebiggers@...nel.org, rdunlap@...radead.org,
        linux-kernel@...r.kernel.org, keyrings@...r.kernel.org,
        linux-crypto@...r.kernel.org, linux-efi@...r.kernel.org,
        linux-integrity@...r.kernel.org
Subject: Re: [RFC PATCH v3 07/13] keys: Add ability to track intended usage
 of the public key

On Thu, 2025-02-06 at 22:13 +0200, Jarkko Sakkinen wrote:
> On Thu, Oct 17, 2024 at 09:55:10AM -0600, Eric Snowberg wrote:
> > Add two new fields in public_key_signature to track the intended usage of
> > the signature.  Also add a flag for the revocation pass.  During signature
> > validation, two verifications can take place for the same signature.  One
> > to see if it verifies against something on the .blacklist keyring and
> > the other to see if it verifies against the supplied keyring. The flag
> > is used to determine which stage the verification is in.
> > 
> > Signed-off-by: Eric Snowberg <eric.snowberg@...cle.com>
> 
> Mimi, was this the patch set you asked to look at while ago?</offtopic>

Yes, in particular please take a look at Paul's comment on 00/13.

Mimi