Mimi Zohar <zohar@xxxxxxxxxxxxxxxxxx> wrote: > No, this just updates the name of the key used to encrypt/decrypt the > encrypted key. For example, the encrypted key evm-key is initially > encrypted/decrypted using 'kmk-trusted'. After the update, it is > encrypted/decrypted with 'kmk'. Both now are trusted keys. Gotcha. The problem is that there are two many different objects in the system called 'keys':-) David -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html