Re: [PATCH] crypto: caam: blob_gen.c: warn if key is insecure

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, 4 Nov 2022, Herbert Xu wrote:
On Wed, Oct 19, 2022 at 02:44:56PM +0200, Nikolaus Voss wrote:

@@ -62,11 +63,13 @@ int caam_process_blob(struct caam_blob_priv *priv,
 		      struct caam_blob_info *info, bool encap)
 {
 	struct caam_blob_job_result testres;
+	const struct caam_drv_private *ctrlpriv;

Please keep the declarations sorted by length in reverse.

ok!


@@ -100,6 +103,11 @@ int caam_process_blob(struct caam_blob_priv *priv,
 		goto out_unmap_in;
 	}

+	ctrlpriv = dev_get_drvdata(jrdev->parent);
+	moo = FIELD_GET(CSTA_MOO, ctrlpriv->ctrl->perfmon.status);
+	if (moo != CSTA_MOO_SECURE && moo != CSTA_MOO_TRUSTED)
+		dev_warn(jrdev, "using insecure test key!\n");

Who is the audience of this warning? Is it possible for this warning
to be too frequent?

The warning is issued every time the non-volatile hardware test key is used to seal/unseal data. This way, the association to the operation is strong and is less likely to be ignored by mistake. Further, the system security monitor can transition to a non-secure state any time, so one warning during boot-up doesn't suffice. IMO, on a typical system, the warning occurs with very low frequency, only a few times during e.g. authenication or mounting of encrypted volumes.

The audience is the developer who forgets to enable secure boot (HAB) or even doesn't know she has to enable HAB to employ the device's unique hardware key instead of the test key.

Niko




[Index of Archives]     [Kernel]     [Gnu Classpath]     [Gnu Crypto]     [DM Crypt]     [Netfilter]     [Bugtraq]
  Powered by Linux