[PATCH v8 0/3]

From: Jarkko Sakkinen

Date: Sun May 24 2026 - 01:15:51 EST


This series introduces key type for operating with asymmetric keys using
a TPM2 chip.

Change Log
==========

v8:
- Reset patch change logs given the overhaul of the code and patches.
- Have only single new subkey type.
- Make key type only use TPM operations.
- Use TPM2_Sign for both ECC and RSA keys.
- Align key descriptions with other key types.

Previous versions
=================

* v7: https://lore.kernel.org/linux-integrity/20240528210823.28798-1-jarkko@xxxxxxxxxx/
* v6: https://lore.kernel.org/linux-integrity/20240528035136.11464-1-jarkko@xxxxxxxxxx/
* v5: https://lore.kernel.org/linux-integrity/20240523212515.4875-1-jarkko@xxxxxxxxxx/
* v4: https://lore.kernel.org/linux-integrity/20240522005252.17841-1-jarkko@xxxxxxxxxx/
* v3: https://lore.kernel.org/linux-integrity/20240521152659.26438-1-jarkko@xxxxxxxxxx/
* v2: https://lore.kernel.org/linux-integrity/336755.1716327854@xxxxxxxxxxxxxxxxxxxxxx/
* v1: https://lore.kernel.org/linux-integrity/20240520184727.22038-1-jarkko@xxxxxxxxxx/
* Derived from https://lore.kernel.org/all/20200518172704.29608-1-prestwoj@xxxxxxxxx/


Jarkko Sakkinen (3):
lib/asn1_encoder: Add asn1_encode_integer_bytes()
crypto: Migrate TPMKey ASN.1 objects from trusted-keys
keys: asymmetric: tpm2_asymmetric

crypto/Kconfig | 7 +
crypto/Makefile | 6 +
crypto/asymmetric_keys/Kconfig | 17 +
crypto/asymmetric_keys/Makefile | 1 +
crypto/asymmetric_keys/tpm2_asymmetric.c | 1096 +++++++++++++++++++++
crypto/tpm2_key.asn1 | 11 +
crypto/tpm2_key.c | 150 +++
include/crypto/tpm2_key.h | 46 +
include/linux/asn1_encoder.h | 3 +
include/linux/tpm.h | 10 +
lib/asn1_encoder.c | 62 ++
security/keys/trusted-keys/Kconfig | 2 +-
security/keys/trusted-keys/Makefile | 2 -
security/keys/trusted-keys/tpm2key.asn1 | 11 -
security/keys/trusted-keys/trusted_tpm2.c | 119 +--
15 files changed, 1421 insertions(+), 122 deletions(-)
create mode 100644 crypto/asymmetric_keys/tpm2_asymmetric.c
create mode 100644 crypto/tpm2_key.asn1
create mode 100644 crypto/tpm2_key.c
create mode 100644 include/crypto/tpm2_key.h
delete mode 100644 security/keys/trusted-keys/tpm2key.asn1

--
2.47.3