Re: [PATCH v5 0/2] ufs: rpmb: make RPMB usable with OP-TEE key derivation
From: Martin K. Petersen (Oracle)
Date: Wed Sep 16 2026 - 22:33:38 EST
On Mon, 31 Aug 2026 17:47:59 +0200, Jorge Ramirez-Ortiz wrote:
> This series makes UFS RPMB work out of the box with an OP-TEE that
> implements the standard eMMC RPMB key-derivation flow, without requiring
> any fundamental changes on the OP-TEE side.
>
> RPMB provides an authenticated, replay-protected storage area whose
> security relies on a secret authentication key. In our setup that key is
> never exposed to the kernel: OP-TEE derives it in the secure world from
> its hardware-unique key and a device identifier (dev_id) that the RPMB
> core hands down. OP-TEE's implementation targets eMMC, where dev_id is
> the 16-byte eMMC CID, and both the fixed length and the raw-CID layout
> are baked into its key derivation.
>
> [...]
Applied to 7.4/scsi-queue, thanks!
[1/2] ufs: rpmb: retry power-on UNIT ATTENTION on the RPMB WLUN
https://git.kernel.org/mkp/scsi/c/a8a34238e5e6
[2/2] ufs: rpmb: use a fixed-length RPMB dev_id
https://git.kernel.org/mkp/scsi/c/657eff806d38
--
Martin K. Petersen