Re: [PATCH 0/4][RFC v2] Introduce the in-kernel hibernation encryption

2018-08-08 Thread Pavel Machek
Hi! > > Define unsafe. > > > > If you want security against bad people resuming your machines, please > Yes, this is one of the requirements. > > But I thought you were trying to do something for secure boot, and "bad > > person resumes your machine" is out of scope there. > > > Not exactly, se

Crypto Fixes for 4.18

2018-08-08 Thread Herbert Xu
Hi Linus: This push fixes a performance regression in arm64 NEON crypto as well as a crash in x86 aegis/morus on unsupported CPUs. Please pull from git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6.git linus Ard Biesheuvel (1): crypto: arm64 - revert NEON yield for fast

Re: [PATCH 0/4][RFC v2] Introduce the in-kernel hibernation encryption

2018-08-08 Thread Yu Chen
Hi, On Wed, Aug 08, 2018 at 07:58:45PM +0200, Pavel Machek wrote: > On Mon 2018-08-06 18:39:58, joeyli wrote: > > On Mon, Aug 06, 2018 at 04:45:34PM +0800, Yu Chen wrote: > > > Hi Pavel, > > > On Sun, Aug 05, 2018 at 12:02:00PM +0200, Pavel Machek wrote: > > > > Hi! > > > > > > > > > > User space

Re: [PATCH 0/4][RFC v2] Introduce the in-kernel hibernation encryption

2018-08-08 Thread Yu Chen
Hi Pavel, Joey, Oliver Please let me describe the original requirement and my understanding about hibernation encryption here, thus help us sync on the same thread: On Wed, Aug 08, 2018 at 07:50:36PM +0200, Pavel Machek wrote: > Hi! > > > > > > User space doesn't need to involve. The EFI root key

Re: [RFC PATCH 2/7] iommu: Add share domain interface in iommu for spimdev

2018-08-08 Thread Kenneth Lee
On Wed, Aug 08, 2018 at 11:13:54AM +0200, Joerg Roedel wrote: > Date: Wed, 8 Aug 2018 11:13:54 +0200 > From: Joerg Roedel > To: Kenneth Lee > CC: Jonathan Corbet , Herbert Xu > , "David S . Miller" , > Alex Williamson , Kenneth Lee > , Hao Fang , Zhou Wang > , Zaibo Xu , Philippe > Ombredann

Re: [PATCH 0/4][RFC v2] Introduce the in-kernel hibernation encryption

2018-08-08 Thread Pavel Machek
On Mon 2018-08-06 18:39:58, joeyli wrote: > On Mon, Aug 06, 2018 at 04:45:34PM +0800, Yu Chen wrote: > > Hi Pavel, > > On Sun, Aug 05, 2018 at 12:02:00PM +0200, Pavel Machek wrote: > > > Hi! > > > > > > > > User space doesn't need to involve. The EFI root key is generated by > > > > > EFI boot stu

Re: [PATCH 0/4][RFC v2] Introduce the in-kernel hibernation encryption

2018-08-08 Thread Pavel Machek
Hi! > > > > User space doesn't need to involve. The EFI root key is generated by > > > > EFI boot stub and be transfer to kernel. It's stored in EFI boot service > > > > variable that it can only be accessed by trusted EFI binary when > > > > secure boot is enabled. > > > > > > > Okay, this apply

Re: [RFC PATCH 0/7] A General Accelerator Framework, WarpDrive

2018-08-08 Thread Jerome Glisse
On Wed, Aug 08, 2018 at 09:08:42AM +0800, Kenneth Lee wrote: > > > 在 2018年08月06日 星期一 11:32 下午, Jerome Glisse 写道: > > On Mon, Aug 06, 2018 at 11:12:52AM +0800, Kenneth Lee wrote: > > > On Fri, Aug 03, 2018 at 10:39:44AM -0400, Jerome Glisse wrote: > > > > On Fri, Aug 03, 2018 at 11:47:21AM +0800,

Re: [V3,1/2] powerpc/powernv: Export opal_check_token symbol

2018-08-08 Thread Michael Ellerman
On Wed, 2018-06-13 at 07:28:57 UTC, Haren Myneni wrote: > Export opal_check_token symbol for modules to check the availability > of OPAL calls before using them. > > Signed-off-by: Haren Myneni Applied to powerpc next, thanks. https://git.kernel.org/powerpc/c/6e708000ec2c93c2bde6a46aa2d6c3 che

Re: [V3, 2/2] crypto/nx: Initialize 842 high and normal RxFIFO control registers

2018-08-08 Thread Michael Ellerman
On Wed, 2018-06-13 at 07:32:40 UTC, Haren Myneni wrote: > NX increments readOffset by FIFO size in receive FIFO control register > when CRB is read. But the index in RxFIFO has to match with the > corresponding entry in FIFO maintained by VAS in kernel. Otherwise NX > may be processing incorrect CR

Re: [RFC] crypto: Remove mcryptd

2018-08-08 Thread Herbert Xu
On Thu, Jul 26, 2018 at 05:25:07PM -0700, Megha Dey wrote: > > 1. On the existing algorithms covered in aesni_intel-glue.c (eg: > __cbc-aes-aesni), 3 algorithms are registered in /proc/crypto: > > __cbc(aes) > cryptd(__cbc-aes-aesni)--> registered via cryptd_create_skcipher > > cb

Re: [PATCH -next] crypto: hisilicon - Make function sec_send_request() static

2018-08-08 Thread Herbert Xu
On Wed, Aug 08, 2018 at 04:30:09AM +, Wei Yongjun wrote: > Fixes the following sparse warning: > > drivers/crypto/hisilicon/sec/sec_algs.c:396:5: warning: > symbol 'sec_send_request' was not declared. Should it be static? > > Fixes: 915e4e8413da ("crypto: hisilicon - SEC security accelerator

Re: [RFC PATCH 2/7] iommu: Add share domain interface in iommu for spimdev

2018-08-08 Thread Joerg Roedel
On Wed, Aug 01, 2018 at 06:22:16PM +0800, Kenneth Lee wrote: > From: Kenneth Lee > > This patch add sharing interface for a iommu_group. The new interface: > > iommu_group_share_domain() > iommu_group_unshare_domain() > > can be used by some virtual iommu_group (such as iommu_group