linux-kernel - Re: [PATCH v12 0/4] Driver and fscrypt support for HW-wrapped inline encryption keys

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20250302222336.GD2079@quark.localdomain>
Date: Sun, 2 Mar 2025 14:23:36 -0800
From: Eric Biggers <ebiggers@...nel.org>
To: Bartosz Golaszewski <brgl@...ev.pl>,
	Bjorn Andersson <andersson@...nel.org>
Cc: linux-fscrypt@...r.kernel.org, linux-scsi@...r.kernel.org,
	linux-block@...r.kernel.org, linux-mmc@...r.kernel.org,
	linux-arm-msm@...r.kernel.org, linux-kernel@...r.kernel.org,
	Gaurav Kashyap <quic_gaurkash@...cinc.com>,
	Dmitry Baryshkov <dmitry.baryshkov@...aro.org>,
	Jens Axboe <axboe@...nel.dk>,
	Konrad Dybcio <konradybcio@...nel.org>,
	Manivannan Sadhasivam <manivannan.sadhasivam@...aro.org>
Subject: Re: [PATCH v12 0/4] Driver and fscrypt support for HW-wrapped inline
 encryption keys

On Tue, Feb 11, 2025 at 09:12:11AM +0100, Bartosz Golaszewski wrote:
> On Mon, Feb 10, 2025 at 9:25 PM Eric Biggers <ebiggers@...nel.org> wrote:
> >
> > This patchset is based on linux-block/for-next and is also available at:
> >
> >     git fetch https://git.kernel.org/pub/scm/fs/fscrypt/linux.git wrapped-keys-v12
> >
> > Now that the block layer support for hardware-wrapped inline encryption
> > keys has been applied for 6.15
> > (https://lore.kernel.org/r/173920649542.40307.8847368467858129326.b4-ty@kernel.dk),
> > this series refreshes the remaining patches.  They add the support for
> > hardware-wrapped inline encryption keys to the Qualcomm ICE and UFS
> > drivers and to fscrypt.  All tested on SM8650 with xfstests.
> >
> > TBD whether these will land in 6.15 too, or wait until 6.16 when the
> > block patches that patches 2-4 depend on will have landed.
> >
> 
> Could Jens provide an immutable branch with these patches? I don't
> think there's a reason to delay it for another 3 months TBH.

They don't seem to be on an immutable branch, so I'll just wait until the next
cycle, rather than trying to do something weird where I rebase the fscrypt tree
onto the block tree and also include driver patches.  TBH, I've already been
waiting 5 years to land this, so an extra 9 weeks is not a big deal :-)

The first patch "soc: qcom: ice: make qcom_ice_program_key() take struct
blk_crypto_key" does not depend on the block ones though, and it could land in
6.15.  Bjorn, would you like to take that patch through your tree to get it out
of the way?

- Eric