On 10/24/24 8:26 AM, Steffen Eiden wrote:
A new secret type (group) allows SE-guests to retrieve the secret value
from the UV secret store. All retrieved secrets (but plaintext) are
retrieved as a PCMKO-wrapped key so that they will never appear in
plaintext in the secure guest. Supported key/secret types are:
AES, AES-XTS, HMAC, and EC. Add support for an in-kernel API and an UAPI
to retrieve a previously added secret. If the hardware supports it,
adding secrets works with the same infrastructure that is used by
associate secrets introduced with AP-pass-through support.
I've picked up everything but patch #5 a couple of days ago.
Also these patches will go through the s390 tree and not through KVM 390
as the crypto team has a series that's based on this one.
