Hi! > > > 2. Ideally kernel memory should be encrypted by the > > > kernel itself. We have uswsusp to support user > > > space hibernation, however doing the encryption > > > in kernel space has more advantages: > > > 2.1 Not having to transfer plain text kernel memory to > > > user space. Per Lee, Chun-Yi, uswsusp is disabled > > > when the kernel is locked down: > > > https://git.kernel.org/pub/scm/linux/kernel/git/dhowells/ > > > linux-fs.git/commit/?h=lockdown-20180410& > > > id=8732c1663d7c0305ae01ba5a1ee4d2299b7b4612 > > > due to: > > > "There have some functions be locked-down because > > > there have no appropriate mechanisms to check the > > > integrity of writing data." > > > https://patchwork.kernel.org/patch/10476751/ > > > > So your goal is to make hibernation compatible with kernel > > lockdown? Do your patches provide sufficient security that hibernation > > can be enabled with kernel lockdown? > > OK, maybe I am dense, but if the key comes from user space, will that > be enough? Yes, that seems to be one of problems of Yu Chen's patchset. > > > Joey Lee and I had a discussion on his previous work at > > > https://patchwork.kernel.org/patch/10476751 > > > We collaborate on this task and his snapshot signature > > > feature can be based on this patch set. > > > > Well, his work can also work without your patchset, right? > > Yes. But you are objecting to encryption in kernel space at all, > aren't you? I don't particulary love the idea of doing hibernation encryption in the kernel, correct. But we have this weird thing called secure boot, some people seem to want. So we may need some crypto in the kernel -- but I'd like something that works with uswsusp, too. Plus, it is mandatory that patch explains what security guarantees they want to provide against what kinds of attacks... Lee, Chun-Yi's patch seemed more promising. Pavel -- (english) http://www.livejournal.com/~pavelmachek (cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html
Attachment:
signature.asc
Description: Digital signature
