Re: [PATCH v11 00/13] Intel SGX1 support

2018-12-09 Thread Josh Triplett
On Sun, Dec 09, 2018 at 09:06:00PM +0100, Pavel Machek wrote: ... > > > > The default permissions for the device are 600. > > > > > > Good. This does not belong to non-root. > > > > There are entirely legitimate use cases for using this as an > > unprivileged user. However, that'll be up to syste

Re: [PATCH v4] fscrypt: add Adiantum support

2018-12-09 Thread Theodore Y. Ts'o
On Mon, Nov 26, 2018 at 11:27:37AM -0800, Eric Biggers wrote: > From: Eric Biggers > > Add support for the Adiantum encryption mode to fscrypt. Adiantum is a > tweakable, length-preserving encryption mode with security provably > reducible to that of XChaCha12 and AES-256, subject to a security

Re: [PATCH v11 00/13] Intel SGX1 support

2018-12-09 Thread Pavel Machek
Hi! (sorry to bring up old thread). > > > > > Intel(R) SGX is a set of CPU instructions that can be used by > > > > > applications > > > > > to set aside private regions of code and data. The code outside the > > > > > enclave > > > > > is disallowed to access the memory inside the enclave by t

PROBLEM: geode-aes not working with skcipher cbc

2018-12-09 Thread Gert Robben
Hi, I try to use geode-aes/CRYPTO_DEV_GEODE, but it gives errors in dmesg and openssl (see below), and doesn't function. I found that the change "crypto: cbc - Convert to skcipher" gives the problem: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/crypto/cbc.c?id=79c

[RFC PATCH] X.509: Parse public key parameters from x509 for akcipher

2018-12-09 Thread Vitaly Chikunov
Some public key algorithms (like ECDSA) keep in parameters field important data such as digest and curve OIDs (possibly more for different ECDSA variants). Thus, just setting a public key (as for RSA) is not enough. Introduce set_params() callback for akcipher which will be used to pass BER encode