[PATCH RFC v6] integrity: support EC-RDSA signatures for asymmetric_verify

2019-02-26 Thread Vitaly Chikunov
Allow to use EC-RDSA signatures for IMA by determining signature type by the hash algorithm name. This works good for EC-RDSA since Streebog and EC-RDSA should always be used together. Cc: Mimi Zohar Cc: Dmitry Kasatkin Cc: linux-integr...@vger.kernel.org Signed-off-by: Vitaly Chikunov --- Chan

Re: [PATCH] crypto: cavium/zip - fix collision with generic cra_driver_name

2019-02-26 Thread Eric Biggers
On Tue, Feb 26, 2019 at 07:55:54AM +, Jan Glauber wrote: > On Sat, Feb 23, 2019 at 12:23:23AM -0800, Eric Biggers wrote: > > From: Eric Biggers > > > > The cavium/zip implementation of the deflate compression algorithm is > > incorrectly being registered under the generic driver name, which >

Re: SEV Command Privilege Separation

2019-02-26 Thread Singh, Brijesh
On 2/14/19 3:08 PM, Nathaniel McCallum wrote: > I've been working on wrapping various SEV kernel APIs for userspace > consumption. There does not appear to be any privilege separation for > these commands: you can run them all or none of them. This is less > than ideal because it means that a com

Re: [RFC 4/4] crypto: caam - use job ring for RNG instantiation instead of DECO

2019-02-26 Thread Chris Spencer
On Tue, 26 Feb 2019 at 14:53, Horia Geanta wrote: > On 2/25/2019 4:37 PM, Chris Spencer wrote: > > On Mon, 25 Feb 2019 at 14:22, Horia Geanta wrote: > >> > >> On 2/22/2019 12:07 PM, spence...@gmail.com wrote: > >>> From: Chris Spencer > >>> > >>> This is required to support the i.MX8. > >>> > >>

Re: [RFC 4/4] crypto: caam - use job ring for RNG instantiation instead of DECO

2019-02-26 Thread Horia Geanta
On 2/25/2019 4:37 PM, Chris Spencer wrote: > On Mon, 25 Feb 2019 at 14:22, Horia Geanta wrote: >> >> On 2/22/2019 12:07 PM, spence...@gmail.com wrote: >>> From: Chris Spencer >>> >>> This is required to support the i.MX8. >>> >> Why exactly is this required? >> You should provide more details. >

Re: [PATCH v5 10/10] integrity: support EC-RDSA signatures for asymmetric_verify

2019-02-26 Thread Mimi Zohar
> > > diff --git a/security/integrity/digsig_asymmetric.c > > > b/security/integrity/digsig_asymmetric.c > > > index d775e03fbbcc..c4a3313e0210 100644 > > > --- a/security/integrity/digsig_asymmetric.c > > > +++ b/security/integrity/digsig_asymmetric.c > > > @@ -104,9 +104,14 @@ int asymmetric_v