Show patches with: State = Action Required       |   2647 patches
« 1 2 ... 20 21 22 … 26 27 »
Patch Series A/R/T S/W/F Date Submitter Delegate State
certs: select PKCS7_MESSAGE_PARSER if needed certs: select PKCS7_MESSAGE_PARSER if needed - - - --- 2021-02-25 Arnd Bergmann New
[v2,3/3] adds nist_p384 register and unregister to support nist_p384 and tests [v2,1/3] add params and ids to support nist_p384 - - - --- 2021-02-22 Saulo Alessandre de Lima New
[v2,2/3] adds math to support nist_p384 fast and changes routines to pass forward ecc_curve [v2,1/3] add params and ids to support nist_p384 - - - --- 2021-02-22 Saulo Alessandre de Lima New
[v2,1/3] add params and ids to support nist_p384 [v2,1/3] add params and ids to support nist_p384 - - 1 --- 2021-02-22 Saulo Alessandre de Lima New
[4/4] Documentation/admin-guide/module-signing.rst: add openssl command option example for CodeSign… Check codeSigning extended key usage extension - - - --- 2021-02-22 Lee, Chun-Yi New
[3/4] modsign: Add codeSigning EKU when generating X.509 key generation config Check codeSigning extended key usage extension - - - --- 2021-02-22 Lee, Chun-Yi New
[2/4] PKCS#7: Check codeSigning EKU for kernel module and kexec pe verification Check codeSigning extended key usage extension - - - --- 2021-02-22 Lee, Chun-Yi New
[1/4] X.509: Add CodeSigning extended key usage parsing Check codeSigning extended key usage extension - - - --- 2021-02-22 Lee, Chun-Yi New
[9/9] pm: hibernate: seal the encryption key with a PCR policy Enable hibernation when Lockdown is enabled - - - --- 2021-02-20 Matthew Garrett New
[8/9] pm: hibernate: Verify the digest encryption key Enable hibernation when Lockdown is enabled - - - --- 2021-02-20 Matthew Garrett New
[7/9] pm: hibernate: Optionally use TPM-backed keys to protect image integrity Enable hibernation when Lockdown is enabled - - - --- 2021-02-20 Matthew Garrett New
[6/9] pm: hibernate: Optionally store and verify a hash of the image Enable hibernation when Lockdown is enabled - - - --- 2021-02-20 Matthew Garrett New
[5/9] security: keys: trusted: Allow storage of PCR values in creation data Enable hibernation when Lockdown is enabled - - - --- 2021-02-20 Matthew Garrett New
[4/9] security: keys: trusted: Store the handle of a loaded key Enable hibernation when Lockdown is enabled - - - --- 2021-02-20 Matthew Garrett New
[3/9] security: keys: trusted: Parse out individual components of the key blob Enable hibernation when Lockdown is enabled - - - --- 2021-02-20 Matthew Garrett New
[2/9] tpm: Allow PCR 23 to be restricted to kernel-only use Enable hibernation when Lockdown is enabled - - - --- 2021-02-20 Matthew Garrett New
[1/9] tpm: Add support for in-kernel resetting of PCRs Enable hibernation when Lockdown is enabled - - - --- 2021-02-20 Matthew Garrett New
[3/3] add nist_p384 register and unregister to support nist_p384 [1/3] add params and ids to support nist_p384 - - - --- 2021-02-19 Saulo Alessandre de Lima New
[2/3] add mathematic to support fast nist_p384 and change routines to pass forward ecc_curve [1/3] add params and ids to support nist_p384 - - - --- 2021-02-19 Saulo Alessandre de Lima New
[1/3] add params and ids to support nist_p384 [1/3] add params and ids to support nist_p384 - - - --- 2021-02-19 Saulo Alessandre de Lima New
[1/3] add params and ids to support nist_p384 [1/3] add params and ids to support nist_p384 - - - --- 2021-02-19 Saulo Alessandre de Lima New
certs: Add support for using elliptic curve keys for signing modules certs: Add support for using elliptic curve keys for signing modules - 1 1 --- 2021-02-19 Stefan Berger New
watch_queue: rectify kernel-doc for init_watch() watch_queue: rectify kernel-doc for init_watch() - 1 - --- 2021-02-19 David Howells New
[v2,5/5] ima: enable loading of build time generated key on .ima keyring ima: kernel build support for loading the kernel module signing key - 2 - --- 2021-02-18 Nayna Jain New
[v2,4/5] keys: define build time generated ephemeral kernel CA key ima: kernel build support for loading the kernel module signing key - - - --- 2021-02-18 Nayna Jain New
[v2,3/5] ima: update kernel module signing process during build ima: kernel build support for loading the kernel module signing key - 1 - --- 2021-02-18 Nayna Jain New
[v2,2/5] keys: generate self-signed module signing key using CSR ima: kernel build support for loading the kernel module signing key - 1 - --- 2021-02-18 Nayna Jain New
[v2,1/5] keys: cleanup build time module signing keys ima: kernel build support for loading the kernel module signing key - 1 - --- 2021-02-18 Nayna Jain New
[v2] sign-file: add openssl engine support [v2] sign-file: add openssl engine support - - - --- 2021-02-18 Yang Song New
cert: Add kconfig dependency for validate_trust cert: Add kconfig dependency for validate_trust - - - --- 2021-02-17 Eric Snowberg New
[v8,4/4] ima: Support EC keys for signature verification Add support for x509 certs with NIST p256 and p192 keys 1 2 - --- 2021-02-15 Stefan Berger New
[v8,3/4] x509: Add support for parsing x509 certs with ECDSA keys Add support for x509 certs with NIST p256 and p192 keys - - - --- 2021-02-15 Stefan Berger New
[v8,2/4] x509: Detect sm2 keys by their parameters OID Add support for x509 certs with NIST p256 and p192 keys - 1 - --- 2021-02-15 Stefan Berger New
[v8,1/4] crypto: Add support for ECDSA signature verification Add support for x509 certs with NIST p256 and p192 keys 1 - - --- 2021-02-15 Stefan Berger New
[5/5] ima: enable loading of build time generated key to .ima keyring ima: kernel build support for loading the kernel module signing key - - - --- 2021-02-11 Nayna Jain New
[4/5] keys: define build time generated ephemeral kernel CA key ima: kernel build support for loading the kernel module signing key - - - --- 2021-02-11 Nayna Jain New
[3/5] ima: update kernel module signing process during build ima: kernel build support for loading the kernel module signing key - - - --- 2021-02-11 Nayna Jain New
[2/5] keys: generate self-signed module signing key using CSR ima: kernel build support for loading the kernel module signing key - - - --- 2021-02-11 Nayna Jain New
[1/5] keys: cleanup build time module signing keys ima: kernel build support for loading the kernel module signing key - - - --- 2021-02-11 Nayna Jain New
[2/2] keys: X.509 public key issuer lookup without AKID [v3,1/2] keys: crypto: Replace BUG_ON() with WARN() in find_asymmetric_key() - 1 - --- 2021-02-11 Andrew Zaborowski New
[v3,1/2] keys: crypto: Replace BUG_ON() with WARN() in find_asymmetric_key() [v3,1/2] keys: crypto: Replace BUG_ON() with WARN() in find_asymmetric_key() - - - --- 2021-02-11 Andrew Zaborowski New
[GIT,PULL] Add EFI_CERT_X509_GUID support for dbx/mokx entries [GIT,PULL] Add EFI_CERT_X509_GUID support for dbx/mokx entries - - - --- 2021-02-10 David Howells New
[GIT,PULL] keys: Collected minor fixes and cleanups [GIT,PULL] keys: Collected minor fixes and cleanups - - - --- 2021-02-10 David Howells New
[no subject] Untitled series #432993 - - - --- 2021-02-10 David Howells New
[v6,5/5] certs: Allow root user to append signed hashes to the blacklist keyring Enable root to update the blacklist keyring - - 1 --- 2021-02-10 Mickaël Salaün New
[v6,4/5] certs: Factor out the blacklist hash creation Enable root to update the blacklist keyring - - - --- 2021-02-10 Mickaël Salaün New
[v6,3/5] certs: Make blacklist_vet_description() more strict Enable root to update the blacklist keyring - 1 - --- 2021-02-10 Mickaël Salaün New
[v6,2/5] certs: Check that builtin blacklist hashes are valid Enable root to update the blacklist keyring - - - --- 2021-02-10 Mickaël Salaün New
[v6,1/5] tools/certs: Add print-cert-tbs-hash.sh Enable root to update the blacklist keyring - 1 - --- 2021-02-10 Mickaël Salaün New
sign-file: add openssl engine support sign-file: add openssl engine support - - - --- 2021-02-10 Yang Song New
[2/2] keys: Allow request_key upcalls from a container to be intercepted keys: request_key() interception in containers - - - --- 2021-02-04 David Howells New
[1/2] Add namespace tags that can be used for matching without pinning a ns keys: request_key() interception in containers - - - --- 2021-02-04 David Howells New
certs: include prototype for load_certificate_list certs: include prototype for load_certificate_list 1 - - --- 2021-02-04 Eric Snowberg New
[v7,4/4] ima: Support EC keys for signature verification Add support for x509 certs with NIST p256 and p192 keys 1 2 - --- 2021-02-01 Stefan Berger New
[v7,3/4] x509: Add support for parsing x509 certs with ECDSA keys Add support for x509 certs with NIST p256 and p192 keys - - - --- 2021-02-01 Stefan Berger New
[v7,2/4] x509: Detect sm2 keys by their parameters OID Add support for x509 certs with NIST p256 and p192 keys - 1 - --- 2021-02-01 Stefan Berger New
[v7,1/4] crypto: Add support for ECDSA signature verification Add support for x509 certs with NIST p256 and p192 keys 1 - - --- 2021-02-01 Stefan Berger New
[v6,4/4] ima: Support EC keys for signature verification Add support for x509 certs with NIST p256 and p192 keys - 2 - --- 2021-01-31 Stefan Berger New
[v6,3/4] x509: Add support for parsing x509 certs with ECDSA keys Add support for x509 certs with NIST p256 and p192 keys - - - --- 2021-01-31 Stefan Berger New
[v6,2/4] x509: Detect sm2 keys by their parameters OID Add support for x509 certs with NIST p256 and p192 keys - 1 - --- 2021-01-31 Stefan Berger New
[v6,1/4] crypto: Add support for ECDSA signature verification Add support for x509 certs with NIST p256 and p192 keys - - - --- 2021-01-31 Stefan Berger New
[v4,3/3] x509: Add support for parsing x509 certs with ECDSA keys Add support for x509 certs with NIST p256 and p192 keys - - - --- 2021-01-28 Stefan Berger New
[v4,2/3] x509: Detect sm2 keys by their parameters OID Add support for x509 certs with NIST p256 and p192 keys - - - --- 2021-01-28 Stefan Berger New
[v4,1/3] crypto: Add support for ECDSA signature verification Add support for x509 certs with NIST p256 and p192 keys - - - --- 2021-01-28 Stefan Berger New
[v15,5/5] security: keys: trusted: Make sealed key properly interoperable TPM 2.0 trusted key rework - 1 1 --- 2021-01-27 James Bottomley New
[v15,4/5] security: keys: trusted: use ASN.1 TPM2 key format for the blobs TPM 2.0 trusted key rework - - 1 --- 2021-01-27 James Bottomley New
[v15,3/5] security: keys: trusted: fix TPM2 authorizations TPM 2.0 trusted key rework - 1 1 --- 2021-01-27 James Bottomley New
[v15,2/5] oid_registry: Add TCG defined OIDS for TPM keys TPM 2.0 trusted key rework 1 1 - --- 2021-01-27 James Bottomley New
[v15,1/5] lib: add ASN.1 encoder TPM 2.0 trusted key rework - 2 1 --- 2021-01-27 James Bottomley New
[v3,3/3] x509: Add support for NIST p192 keys in certificates and akcipher Add support for x509 certs with NIST p256 and p192 keys - - - --- 2021-01-27 Stefan Berger New
[v3,2/3] x509: Add support for parsing x509 certs with NIST p256 keys Add support for x509 certs with NIST p256 and p192 keys - - - --- 2021-01-27 Stefan Berger New
[v3,1/3] x509: Detect sm2 keys by their parameters OID Add support for x509 certs with NIST p256 and p192 keys - - - --- 2021-01-27 Stefan Berger New
[v6] scripts: use pkg-config to locate libcrypto [v6] scripts: use pkg-config to locate libcrypto - - - --- 2021-01-27 Rolf Eike Beer New
[v2,3/3] x509: Add support for NIST p192 keys in certificates and akcipher Add support for x509 certs with NIST p256 and p192 keys - - - --- 2021-01-26 Stefan Berger New
[v2,2/3] x509: Add support for parsing x509 certs with NIST p256 keys Add support for x509 certs with NIST p256 and p192 keys - - - --- 2021-01-26 Stefan Berger New
[v2,1/3] x509: Detect sm2 keys by their parameters OID Add support for x509 certs with NIST p256 and p192 keys - - - --- 2021-01-26 Stefan Berger New
[3/3] x509: Detect sm2 keys by their parameters OID Add support for x509 certs with NIST p256 and p192 keys - - - --- 2021-01-26 Stefan Berger New
[2/3] x509: Add support for NIST p192 keys in certificates and akcipher Add support for x509 certs with NIST p256 and p192 keys - - - --- 2021-01-26 Stefan Berger New
[1/3] x509: Add support for parsing x509 certs with NIST p256 keys Add support for x509 certs with NIST p256 and p192 keys - - - --- 2021-01-26 Stefan Berger New
[v2,7/7] fs: HKDF - remove duplicate memory clearing Add KDF implementations to crypto API - - - --- 2021-01-24 Stephan Mueller New
[v2,6/7] fs: use HKDF implementation from kernel crypto API Add KDF implementations to crypto API - - - --- 2021-01-24 Stephan Mueller New
[v2,5/7] security: DH - use KDF implementation from crypto API Add KDF implementations to crypto API - - - --- 2021-01-24 Stephan Mueller New
[v2,4/7] security: DH - remove dead code for zero padding Add KDF implementations to crypto API - - - --- 2021-01-24 Stephan Mueller New
[v2,3/7] crypto: add RFC5869 HKDF Add KDF implementations to crypto API - - - --- 2021-01-24 Stephan Mueller New
[v2,2/7] crypto: add SP800-108 counter key derivation function Add KDF implementations to crypto API - - - --- 2021-01-24 Stephan Mueller New
[v2,1/7] crypto: Add key derivation self-test support code Add KDF implementations to crypto API - - - --- 2021-01-24 Stephan Mueller New
[v5,4/4] integrity: Load mokx variables into the blacklist keyring Add EFI_CERT_X509_GUID support for dbx/mokx entries - - - --- 2021-01-22 Eric Snowberg New
[v5,3/4] certs: Add ability to preload revocation certs Add EFI_CERT_X509_GUID support for dbx/mokx entries 1 - - --- 2021-01-22 Eric Snowberg New
[v5,2/4] certs: Move load_system_certificate_list to a common function Add EFI_CERT_X509_GUID support for dbx/mokx entries 1 - - --- 2021-01-22 Eric Snowberg New
[v5,1/4] certs: Add EFI_CERT_X509_GUID support for dbx entries Add EFI_CERT_X509_GUID support for dbx/mokx entries - 1 - --- 2021-01-22 Eric Snowberg New
[2/2] dm crypt: support using trusted keys Untitled series #419725 - - - --- 2021-01-22 Ahmad Fatoum New
[v4,10/10] certs: Allow root user to append signed hashes to the blacklist keyring Enable root to update the blacklist keyring - - - --- 2021-01-21 Mickaël Salaün New
[v4,09/10] PKCS#7: Fix missing include Enable root to update the blacklist keyring - 2 - --- 2021-01-21 Mickaël Salaün New
[v4,08/10] certs: Factor out the blacklist hash creation Enable root to update the blacklist keyring 1 - - --- 2021-01-21 Mickaël Salaün New
[v4,07/10] certs/blacklist: fix kernel doc interface issue Enable root to update the blacklist keyring - 2 - --- 2021-01-21 Mickaël Salaün New
[v4,06/10] certs: Make blacklist_vet_description() more strict Enable root to update the blacklist keyring 1 - - --- 2021-01-21 Mickaël Salaün New
[v4,05/10] certs: Replace K{U,G}IDT_INIT() with GLOBAL_ROOT_{U,G}ID Enable root to update the blacklist keyring - - - --- 2021-01-21 Mickaël Salaün New
[v4,04/10] certs: Fix blacklist flag type confusion Enable root to update the blacklist keyring 1 - - --- 2021-01-21 Mickaël Salaün New
[v4,03/10] certs: Fix blacklisted hexadecimal hash string check Enable root to update the blacklist keyring - 1 - --- 2021-01-21 Mickaël Salaün New
[v4,02/10] certs: Check that builtin blacklist hashes are valid Enable root to update the blacklist keyring - - - --- 2021-01-21 Mickaël Salaün New
« 1 2 ... 20 21 22 … 26 27 »