From: Greg Joyce <gjoyce@xxxxxxxxxxxxxxxxxx>
Generic functions have been defined for accessing SED Opal keys.
The generic functions are defined as weak so that they may be superseded
by keystore specific versions.
PowerPC/pseries versions of these functions provide read/write access
to SED Opal keys in the PLPKS keystore.
The SED block driver has been modified to read the SED Opal
keystore to populate a key in the SED Opal keyring. Changes to the
SED Opal key will be written to the SED Opal keystore.
Patch 3 "keystore access for SED Opal keys" is dependent on:
https://lore.kernel.org/keyrings/20220818143045.680972-4-gjoyce@xxxxxxxxxxxxxxxxxx/T/#u
Changelog
v5: - updated to reflect changes in PLPKS API
v4:
- scope reduced to cover just SED Opal keys
- base SED Opal keystore is now in SED block driver
- removed use of enum to indicate type
- refactored common code into common function that read and
write use
- removed cast to void
- added use of SED Opal keystore functions to SED block driver
v3:
- No code changes, but per reviewer requests, adding additional
mailing lists(keyring, EFI) for wider review.
v2:
- Include feedback from Gregory Joyce, Eric Richter and
Murilo Opsfelder Araujo.
- Include suggestions from Michael Ellerman.
- Moved a dependency from generic SED code to this patchset.
This patchset now builds of its own.
Greg Joyce (4):
block:sed-opal: SED Opal keystore
powerpc/pseries: PLPKS SED Opal keystore support
block: sed-opal: keystore access for SED Opal keys
powerpc/pseries: update SED for PLPKS api changes
arch/powerpc/platforms/pseries/Kconfig | 6 +
arch/powerpc/platforms/pseries/Makefile | 1 +
.../powerpc/platforms/pseries/plpks_sed_ops.c | 114 ++++++++++++++++++
block/Kconfig | 1 +
block/Makefile | 2 +-
block/sed-opal-key.c | 24 ++++
block/sed-opal.c | 18 ++-
include/linux/sed-opal-key.h | 15 +++
8 files changed, 178 insertions(+), 3 deletions(-)
create mode 100644 arch/powerpc/platforms/pseries/plpks_sed_ops.c
create mode 100644 block/sed-opal-key.c
create mode 100644 include/linux/sed-opal-key.h
base-commit: 6a8f57ae2eb07ab39a6f0ccad60c760743051026
--
gjoyce@xxxxxxxxxxxxxxxxxx
