Ahmad Fatoum 20e73ece06 KEYS: trusted: allow use of kernel RNG for key material ... [ Upstream commit fcd7c26901 ] The two existing trusted key sources don't make use of the kernel RNG, but instead let the hardware doing the sealing/unsealing also generate the random key material. However, both users and future backends may want to place less trust into the quality of the trust source's random number generator and instead reuse the kernel entropy pool, which can be seeded from multiple entropy sources. Make this possible by adding a new trusted.rng parameter, that will force use of the kernel RNG. In its absence, it's up to the trust source to decide, which random numbers to use, maintaining the existing behavior. Suggested-by: Jarkko Sakkinen <jarkko@kernel.org> Acked-by: Sumit Garg <sumit.garg@linaro.org> Acked-by: Pankaj Gupta <pankaj.gupta@nxp.com> Reviewed-by: David Gstir <david@sigma-star.at> Reviewed-by: Pankaj Gupta <pankaj.gupta@nxp.com> Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org> Tested-by: Pankaj Gupta <pankaj.gupta@nxp.com> Tested-by: Michael Walle <michael@walle.cc> # on ls1028a (non-E and E) Tested-by: John Ernberg <john.ernberg@actia.se> # iMX8QXP Signed-off-by: Ahmad Fatoum <a.fatoum@pengutronix.de> Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org> Stable-dep-of: 01bbafc63b ("KEYS: trusted: Remove redundant static calls usage") Signed-off-by: Sasha Levin <sashal@kernel.org>		2023-10-19 23:05:33 +02:00
..
asymmetric-parser.h	docs: crypto: convert asymmetric-keys.txt to ReST	2020-06-19 14:03:46 -06:00
asymmetric-subtype.h	docs: crypto: convert asymmetric-keys.txt to ReST	2020-06-19 14:03:46 -06:00
asymmetric-type.h	ima: Support EC keys for signature verification	2021-03-26 19:41:59 +11:00
big_key-type.h	keys: Implement update for the big_key type	2020-06-02 17:22:31 +01:00
ceph-type.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
dns_resolver-type.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152	2019-05-30 11:26:32 -07:00
encrypted-type.h	encrypted-keys: Replace HTTP links with HTTPS ones	2021-01-21 16:16:09 +00:00
keyring-type.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152	2019-05-30 11:26:32 -07:00
request_key_auth-type.h	request_key improvements	2019-07-08 19:19:37 -07:00
rxrpc-type.h	rxrpc: Don't leak the service-side session key to userspace	2020-11-23 18:09:29 +00:00
system_keyring.h	integrity-v5.13	2021-05-01 15:32:18 -07:00
trusted-type.h	KEYS: trusted: allow use of kernel RNG for key material	2023-10-19 23:05:33 +02:00
trusted_tee.h	KEYS: trusted: Introduce TEE based Trusted Keys	2021-04-14 16:30:30 +03:00
trusted_tpm.h	KEYS: trusted: Add generic trusted keys framework	2021-04-14 16:30:30 +03:00
user-type.h	KEYS: Replace zero-length array with flexible-array	2020-06-02 17:22:31 +01:00