[PATCH v2 0/6] s390/uv: Retrieve Secrets Ultravisor Call support

Steffen Eiden posted 6 patches 1 month, 3 weeks ago
There is a newer version of this series
arch/s390/boot/uv.c                   |   7 +-
arch/s390/include/asm/uv.h            | 142 +++++++++++++++++++++++-
arch/s390/include/uapi/asm/uvdevice.h |  34 +++---
arch/s390/kernel/uv.c                 | 151 ++++++++++++++++++++++++-
drivers/s390/char/uvdevice.c          | 152 +++++++++++++++++++++-----
5 files changed, 438 insertions(+), 48 deletions(-)
[PATCH v2 0/6] s390/uv: Retrieve Secrets Ultravisor Call support
Posted by Steffen Eiden 1 month, 3 weeks ago
A new secret type (group) allows SE-guests to retrieve the secret value
from the UV secret store. All retrieved secrets (but plaintext) are
retrieved as a PCMKO-wrapped key so that they will never appear in
plaintext in the secure guest. Supported key/secret types are:
AES, AES-XTS, HMAC, and EC. Add support for an in-kernel API and an UAPI
to retrieve a previously added secret. If the Hardware supports it,
adding secrets works with the same infrastructure that is used by
associate secrets introduced with AP-pass-through support.

With this addition List Secret UVCs can report more-data now and may
expect a starting index different to zero. This requires the addition of
LIST_SECRET_EXT IOCTL that works the same as the non_EXT variant but
additionally accepts an index (u16) as input.

since v1:
	* added various r-b's
	* fixed nits and minor issues

Steffen Eiden (6):
  s390/boot/uv.c: Use a constant for more-data rc
  s390/uv: Retrieve UV secrets support
  s390/uvdevice: Add Retrieve Secret IOCTL
  s390/uvdevice: Increase indent in IOCTL definitions
  s390/uvdevice: Add List Secrets Ext IOCTL
  s390/uv: Retrieve UV secrets sysfs support

 arch/s390/boot/uv.c                   |   7 +-
 arch/s390/include/asm/uv.h            | 142 +++++++++++++++++++++++-
 arch/s390/include/uapi/asm/uvdevice.h |  34 +++---
 arch/s390/kernel/uv.c                 | 151 ++++++++++++++++++++++++-
 drivers/s390/char/uvdevice.c          | 152 +++++++++++++++++++++-----
 5 files changed, 438 insertions(+), 48 deletions(-)

-- 
2.43.0