Re: [PATCH] tpm: use kfree_sensitive() for context and session buffers
From: James Bottomley
Date: Thu Jul 16 2026 - 08:28:20 EST
On Wed, 2026-07-15 at 18:03 -0600, Ivy Lopez wrote:
> The context_buf and session_buf fields in struct tpm_space contain
> TPM context blobs which may include sensitive cryptographic material.
That's not true ... at least not in a way that could be exfiltrated.
All cryptographically sensitive areas of the context are already
encrypted by the TPM with an internal key so they contain nothing
useful to an attacker.
Regards,
James