From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id E5B8DC5DF69 for ; Thu, 13 Aug 2026 15:01:07 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20210309; h=Sender:List-Subscribe:List-Help :List-Post:List-Archive:List-Unsubscribe:List-Id:Content-Transfer-Encoding: Content-Type:In-Reply-To:From:References:Cc:To:Subject:MIME-Version:Date: Message-ID:Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Owner; bh=JFLe6tkLYuEC2gnEl/GsgjOSVqwPRw7abghLXfye9/g=; b=HUPKHxMtMZWvWyC1AUqTl9Mvq6 K8EM1c6y4xBnGdasyYAaQtPXEobiCmFVGzQKdZRQkEhIZxTCk78y2djnDozwMURJfTOeJvJ7tFFPb 9WvEVhbM5Pg5UGhtij+8qNRGCYF0xlah/PPjY8fmRSYkL0scjCqa/dpGMtbT2JiDk6OTs0DA4SEaG DT6iuIUZ9pqRn6pGwCrlJL/cxoJh6dNyUp36zxiYgGDKI8aRtI5i4ThiFuxcDRUwiLralD3TPOrAF i6ix+woTLLF2vIswOP10JgMWXJ7VeWMpjAfz2pj8KnxU6MyBEblt7yJs+bW86G8FIVffNd4dDjDOZ iE8VtrTg==; Received: from localhost ([::1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.99.1 #2 (Red Hat Linux)) id 1wuWvb-00000000tHY-2F4g; Thu, 13 Aug 2026 15:01:07 +0000 Received: from mail-wr1-x433.google.com ([2a00:1450:4864:20::433]) by bombadil.infradead.org with esmtps (Exim 4.99.1 #2 (Red Hat Linux)) id 1wtsvh-0000000EuWa-3kUW for linux-nvme@lists.infradead.org; Tue, 11 Aug 2026 20:18:36 +0000 Received: by mail-wr1-x433.google.com with SMTP id ffacd0b85a97d-4813ea321cdso1024563f8f.1 for ; Tue, 11 Aug 2026 13:18:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1786479511; x=1787084311; darn=lists.infradead.org; h=content-transfer-encoding:content-type:in-reply-to:autocrypt:from :content-language:references:cc:to:subject:user-agent:mime-version :date:message-id:from:to:cc:subject:date:message-id:reply-to :content-type; bh=JFLe6tkLYuEC2gnEl/GsgjOSVqwPRw7abghLXfye9/g=; b=r+0ET2fe4b8ac3qQp8GrDwnwtdL3/gQKq2Etd+/kCTpk0f+998uB/t0E8CPAxJOR2h +G5sN167mbQiTBXYnO3XW99XOiXwf1pThFV+JtEDbgAE1AnTm6h3kQLSSGHYIeIiH3m5 VP0ObJ213Pb9u3OC3KKcMh/xX6LQAbYBefHw2IQxpddnnMlO7MepSb1ypEUgRmEVntPm EAfMrEpt8X+Hx5TrVzpCvr0B/ES9gam6baMQqsUr15+UslsCy+JqgjOMNgqhhLR2jmcB 8ZsyGRquu6e0ffBgYU+sh19Sf37OymxihwaI1PDGcG/OncOI5AsGMYc8yKVrD7dZc1YB iz5A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786479511; x=1787084311; h=content-transfer-encoding:content-type:in-reply-to:autocrypt:from :content-language:references:cc:to:subject:user-agent:mime-version :date:message-id:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=JFLe6tkLYuEC2gnEl/GsgjOSVqwPRw7abghLXfye9/g=; b=JhWMxWFebP8TDG46fZNpHVLNXcxlnSvia5iVLNGZ0S2rq9nxynCeD16kHCMLxsLsow zoXuKiyNPAI5StlnduXvErHKpgdZcFjMuEP13poRHEgtIoj2bQVe01ixyIQiOLGHITRu 70QV7oWEio2fTkPVXCH1atKl1FxsnkjWUm7SXyX5lBMsM/4A0D/IOyGTin3+VyB2AChU TFAzHE5UznKQfhOsq4weTJFZS2WLmYJxOtPugTwf/hrjgAU017n000puAEg6q3K9pqhx nBt0e+A1PT+klAUaivBwFknGO7tp1CHWBfBBKkbUj3/NmZd403PTndhCMlsU+SbKrmeX +RAg== X-Forwarded-Encrypted: i=1; AHgh+RqBj/K5UmkN9xYxo3/TX/02ZfafRUEPj3YA5X0wlSWH688UG5BydLNhD7ve3ETz4iPmqhSntQW9voe7@lists.infradead.org X-Gm-Message-State: AOJu0Ywyd060bLEU8Axbc7AZwaj0LGYcm+oHoVxz+1635WQuQa0eavdj xY9Inm6/6YPQRVfD/aVI9SW2cOJnxGK9zRVU0YWFYROX3p7sjfMtPCT1 X-Gm-Gg: AR+sD10AJ0zTeRw9Gi6hzE2Uo4VCybHHp3/LqynnOoQS8bzttfYJdcZX4buLG7mlj2j d9l+AOrpUaeqjGdIwC8MbqcLKN7gfQktptaK2UNpR61jve8q69TsUUlniKPKLrTglxzR3mhdXRF CN0mPx59r3DAhQSOyB08gXUbeYXtEBLX0GnUa1g7HTMkGamQyQ/RFOPvo3EwCWuUJlXBbLtj0vV f46mo5+FrrOUC4izFsyHck583Zus9cQVBP1y2ib4eK8fGSQfYYmfJqKrVeP6tqLaIQ+v6xFNJXC zAY/NUfLMibqLnmUkvN1Ys8BH01SZdHhebbxWC4TT6RoQ0e3pnBDMNSzu4iEU7QjQ9W0bzoBSYu KS5eCVSauchb9oPh4u8jElNULATgCkg7xt6TSewTPhfcN3Hs1L5HhSm+PiF6icKWhF4jvumM5Vm oXw1AwWuLOEABFCB7PqFG1YDxoVvrSu8GQ88gBZ3Ct+ot4I41jhLA+q1iYJosap/3rrofxc3ptE f8+jNOizTy8jA== X-Received: by 2002:a05:6000:430d:b0:47f:e7f9:5251 with SMTP id ffacd0b85a97d-4814ffe28b1mr3367485f8f.3.1786479511163; Tue, 11 Aug 2026 13:18:31 -0700 (PDT) Received: from [192.168.2.14] (85-70-151-113.rcd.o2.cz. [85.70.151.113]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-48150bf5c5fsm976683f8f.3.2026.08.11.13.18.28 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 11 Aug 2026 13:18:30 -0700 (PDT) Message-ID: <8654c2d4-8d9d-43f5-9256-adf2915209e9@gmail.com> Date: Tue, 11 Aug 2026 22:18:27 +0200 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH v2 13/13] dm crypt: wipe key material before kdump To: =?UTF-8?Q?Jan_Sebastian_G=C3=B6tte?= Cc: kexec@lists.infradead.org, linux-kernel@vger.kernel.org, linux-arm-kernel@lists.infradead.org, linux-mm@kvack.org, keyrings@vger.kernel.org, linux-doc@vger.kernel.org, linux-security-module@vger.kernel.org, linux-crypto@vger.kernel.org, linux-nvme@lists.infradead.org, linux-nfs@vger.kernel.org, linux-integrity@vger.kernel.org, linux-afs@lists.infradead.org, netdev@vger.kernel.org, linux-fscrypt@vger.kernel.org, linux-fsdevel@vger.kernel.org, dm-devel@lists.linux.dev, Andrew Morton , Baoquan He , Mike Rapoport , Pasha Tatashin , Pratyush Yadav , Dave Young , Catalin Marinas , Will Deacon , David Howells , Jarkko Sakkinen , Jonathan Corbet , Shuah Khan , Paul Moore , James Morris , "Serge E. Hallyn" , Lukas Wunner , Ignat Korchagin , Herbert Xu , "David S. Miller" , Keith Busch , Jens Axboe , Christoph Hellwig , Sagi Grimberg , Trond Myklebust , Anna Schumaker , Mimi Zohar , James Bottomley , Marc Dionne , Eric Dumazet , Jakub Kicinski , Paolo Abeni , Simon Horman , Eric Biggers , "Theodore Y. Ts'o" , Jaegeuk Kim , Alexander Viro , Christian Brauner , Jan Kara , Alasdair Kergon , Mike Snitzer , Mikulas Patocka , Benjamin Marzinski References: <20260811-crash-zeroize-rework-v2-0-9561d13c2340@jaseg.de> <20260811-crash-zeroize-rework-v2-13-9561d13c2340@jaseg.de> Content-Language: en-US From: Milan Broz Autocrypt: addr=gmazyland@gmail.com; keydata= xsFNBE94p38BEADZRET8y1gVxlfDk44/XwBbFjC7eM6EanyCuivUPMmPwYDo9qRey0JdOGhW hAZeutGGxsKliozmeTL25Z6wWICu2oeY+ZfbgJQYHFeQ01NVwoYy57hhytZw/6IMLFRcIaWS Hd7oNdneQg6mVJcGdA/BOX68uo3RKSHj6Q8GoQ54F/NpCotzVcP1ORpVJ5ptyG0x6OZm5Esn 61pKE979wcHsz7EzcDYl+3MS63gZm+O3D1u80bUMmBUlxyEiC5jo5ksTFheA8m/5CAPQtxzY vgezYlLLS3nkxaq2ERK5DhvMv0NktXSutfWQsOI5WLjG7UWStwAnO2W+CVZLcnZV0K6OKDaF bCj4ovg5HV0FyQZknN2O5QbxesNlNWkMOJAnnX6c/zowO7jq8GCpa3oJl3xxmwFbCZtH4z3f EVw0wAFc2JlnufR4dhaax9fhNoUJ4OSVTi9zqstxhEyywkazakEvAYwOlC5+1FKoc9UIvApA GvgcTJGTOp7MuHptHGwWvGZEaJqcsqoy7rsYPxtDQ7bJuJJblzGIUxWAl8qsUsF8M4ISxBkf fcUYiR0wh1luUhXFo2rRTKT+Ic/nJDE66Ee4Ecn9+BPlNODhlEG1vk62rhiYSnyzy5MAUhUl stDxuEjYK+NGd2aYH0VANZalqlUZFTEdOdA6NYROxkYZVsVtXQARAQABzSBNaWxhbiBCcm96 IDxnbWF6eWxhbmRAZ21haWwuY29tPsLBlQQTAQgAPwIbAwYLCQgHAwIGFQgCCQoLBBYCAwEC HgECF4AWIQQqKRgkP95GZI0GhvnZsFd72T6Y/AUCYaUUZgUJJPhv5wAKCRDZsFd72T6Y/D5N D/438pkYd5NyycQ2Gu8YAjF57Od2GfeiftCDBOMXzh1XxIx7gLosLHvzCZ0SaRYPVF/Nr/X9 sreJVrMkwd1ILNdCQB1rLBhhKzwYFztmOYvdCG9LRrBVJPgtaYqO/0493CzXwQ7FfkEc4OVB uhBs4YwFu+kmhh0NngcP4jaaaIziHw/rQ9vLiAi28p1WeVTzOjtBt8QisTidS2VkZ+/iAgqB 9zz2UPkE1UXBAPU4iEsGCVXGWRz99IULsTNjP4K3p8ZpdZ6ovy7X6EN3lYhbpmXYLzZ3RXst PEojSvqpkSQsjUksR5VBE0GnaY4B8ZlM3Ng2o7vcxbToQOsOkbVGn+59rpBKgiRadRFuT+2D x80VrwWBccaph+VOfll9/4FVv+SBQ1wSPOUHl11TWVpdMFKtQgA5/HHldVqrcEssWJb9/tew 9pqxTDn6RHV/pfzKCspiiLVkI66BF802cpyboLBBSvcDuLHbOBHrpC+IXCZ7mgkCrgMlZMql wFWBjAu8Zlc5tQJPgE9eeQAQrfZRcLgux88PtxhVihA1OsMNoqYapgMzMTubLUMYCCsjrHZe nzw5uTcjig0RHz9ilMJlvVbhwVVLmmmf4p/R37QYaqm1RycLpvkUZUzSz2NCyTcZp9nM6ooR GhpDQWmUdH1Jz9T6E9//KIhI6xt4//P15ZfiIs7BTQRPeKd/ARAA3oR1fJ/D3GvnoInVqydD U9LGnMQaVSwQe+fjBy5/ILwo3pUZSVHdaKeVoa84gLO9g6JLToTo+ooMSBtsCkGHb//oiGTU 7KdLTLiFh6kmL6my11eiK53o1BI1CVwWMJ8jxbMBPet6exUubBzceBFbmqq3lVz4RZ2D1zKV njxB0/KjdbI53anIv7Ko1k+MwaKMTzO/O6vBmI71oGQkKO6WpcyzVjLIip9PEpDUYJRCrhKg hBeMPwe+AntP9Om4N/3AWF6icarGImnFvTYswR2Q+C6AoiAbqI4WmXOuzJLKiImwZrSYnSfQ 7qtdDGXWYr/N1+C+bgI8O6NuAg2cjFHE96xwJVhyaMzyROUZgm4qngaBvBvCQIhKzit61oBe I/drZ/d5JolzlKdZZrcmofmiCQRa+57OM3Fbl8ykFazN1ASyCex2UrftX5oHmhaeeRlGVaTV iEbAvU4PP4RnNKwaWQivsFhqQrfFFhvFV9CRSvsR6qu5eiFI6c8CjB49gBcKKAJ9a8gkyWs8 sg4PYY7L15XdRn8kOf/tg98UCM1vSBV2moEJA0f98/Z48LQXNb7dgvVRtH6owARspsV6nJyD vktsLTyMW5BW9q4NC1rgQC8GQXjrQ+iyQLNwy5ESe2MzGKkHogxKg4Pvi1wZh9Snr+RyB0Rq rIrzbXhyi47+7wcAEQEAAcLBfAQYAQgAJgIbDBYhBCopGCQ/3kZkjQaG+dmwV3vZPpj8BQJh pRSXBQkk+HAYAAoJENmwV3vZPpj8BPMP/iZV+XROOhs/MsKd7ngQeFgETkmt8YVhb2Rg3Vgp AQe9cn6aw9jk3CnB0ecNBdoyyt33t3vGNau6iCwlRfaTdXg9qtIyctuCQSewY2YMk5AS8Mmb XoGvjH1Z/irrVsoSz+N7HFPKIlAy8D/aRwS1CHm9saPQiGoeR/zThciVYncRG/U9J6sV8XH9 OEPnQQR4w/V1bYI9Sk+suGcSFN7pMRMsSslOma429A3bEbZ7Ikt9WTJnUY9XfL5ZqQnjLeRl 8243OTfuHSth26upjZIQ2esccZMYpQg0/MOlHvuFuFu6MFL/gZDNzH8jAcBrNd/6ABKsecYT nBInKH2TONc0kC65oAhrSSBNLudTuPHce/YBCsUCAEMwgJTybdpMQh9NkS68WxQtXxU6neoQ U7kEJGGFsc7/yXiQXuVvJUkK/Xs04X6j0l1f/6KLoNQ9ep/2In596B0BcvvaKv7gdDt1Trgg vlB+GpT+iFRLvhCBe5kAERREfRfmWJq1bHod/ulrp/VLGAaZlOBTgsCzufWF5SOLbZkmV2b5 xy2F/AU3oQUZncCvFMTWpBC+gO/o3kZCyyGCaQdQe4jS/FUJqR1suVwNMzcOJOP/LMQwujE/ Ch7XLM35VICo9qqhih4OvLHUAWzC5dNSipL+rSGHvWBdfXDhbezJIl6sp7/1rJfS8qPs In-Reply-To: <20260811-crash-zeroize-rework-v2-13-9561d13c2340@jaseg.de> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.9.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20260811_131833_971500_0D4472B3 X-CRM114-Status: GOOD ( 19.67 ) X-Mailman-Approved-At: Thu, 13 Aug 2026 08:01:01 -0700 X-BeenThere: linux-nvme@lists.infradead.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: "Linux-nvme" Errors-To: linux-nvme-bounces+linux-nvme=archiver.kernel.org@lists.infradead.org On 8/11/26 7:53 PM, Jan Sebastian Götte wrote: > Wipe volume key/iv copies kept by dm-crypt with > CONFIG_CRASH_WIPE_SECRETS. The backend tfms are already handled > separately. > > Add a list tracking struct crypt_config instances when > CONFIG_CRASH_WIPE_SECRETS is set. Structs are tracked here to avoid > having to enumerate them through some roundabout way before kdump, when > we can't safely take locks anymore. Well, dm-crypt has crypt_wipe_key(), which can be called through a device-mapper message. It also sets keys to zero in the crypto API. Why do we need yet another way to wipe keys here, reimplementing everything twice? I can imagine an emergency wrapper callback that will suspend dm-crypt and call existing code. > Use custom wipe handlers even for things like ivs that have existing > wipe functions elsewhere because we need to use crash_wipe_memzero > instead of memzero_explicit. The crash_wipe helper memzero_explicit's > the target buffers and flushes data caches. On ARM64, missing that cache > flush could lead to the zeros not being written to DRAM before the kdump > code turns off the data caches moments later. Please no. It looks to me like you are trying to fix this on the wrong layer. This way everyone will need their own memzero... Dunno, but I really do not like dm-crypt becoming completely bloated with code that has nothing to do with the original purpose of this driver. Milan > > Signed-off-by: Jan Sebastian Götte > --- > drivers/md/dm-crypt.c | 151 ++++++++++++++++++++++++++++++++++++++++++++------ > 1 file changed, 134 insertions(+), 17 deletions(-) >