38 lines
875 B
C
38 lines
875 B
C
|
// SPDX-License-Identifier: GPL-2.0
|
||
|
|
/*
|
||
|
|
* Copyright 2018 NXP
|
||
|
|
*
|
||
|
|
*/
|
||
|
|
|
||
|
|
#include <linux/uaccess.h>
|
||
|
|
#include <linux/module.h>
|
||
|
|
#include <linux/err.h>
|
||
|
|
#include <keys/secure-type.h>
|
||
|
|
#include <keys/encrypted-type.h>
|
||
|
|
#include "encrypted.h"
|
||
|
|
|
||
|
|
/*
|
||
|
|
* request_secure_key - request the secure key
|
||
|
|
*
|
||
|
|
* Secure keys and their blobs are derived from CAAM hardware.
|
||
|
|
* Userspace manages secure key-type data, but key data is not
|
||
|
|
* visible in plain form. It is presented as blobs.
|
||
|
|
*/
|
||
|
|
struct key *request_secure_key(const char *secure_desc,
|
||
|
|
const u8 **master_key, size_t *master_keylen)
|
||
|
|
{
|
||
|
|
struct secure_key_payload *spayload;
|
||
|
|
struct key *skey;
|
||
|
|
|
||
|
|
skey = request_key(&key_type_secure, secure_desc, NULL);
|
||
|
|
if (IS_ERR(skey))
|
||
|
|
goto error;
|
||
|
|
|
||
|
|
down_read(&skey->sem);
|
||
|
|
spayload = skey->payload.data[0];
|
||
|
|
*master_key = spayload->key;
|
||
|
|
*master_keylen = spayload->key_len;
|
||
|
|
error:
|
||
|
|
return skey;
|
||
|
|
}
|