From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753759AbdBITYU (ORCPT ); Thu, 9 Feb 2017 14:24:20 -0500 Received: from bedivere.hansenpartnership.com ([66.63.167.143]:45256 "EHLO bedivere.hansenpartnership.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752638AbdBITYS (ORCPT ); Thu, 9 Feb 2017 14:24:18 -0500 Message-ID: <1486668255.2616.43.camel@HansenPartnership.com> Subject: Re: [tpmdd-devel] [RFC] tpm2-space: add handling for global session exhaustion From: James Bottomley To: greg@enjellic.com, Jarkko Sakkinen Cc: Ken Goldman , tpmdd-devel@lists.sourceforge.net, linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org Date: Thu, 09 Feb 2017 11:24:15 -0800 In-Reply-To: <201702090906.v1996c6a015552@wind.enjellic.com> References: <201702090906.v1996c6a015552@wind.enjellic.com> Content-Type: text/plain; charset="UTF-8" X-Mailer: Evolution 3.16.5 Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Thu, 2017-02-09 at 03:06 -0600, Dr. Greg Wettstein wrote: > Referring back to Ken's comments about having 20+ clients waiting to > get access to the hardware. Even with the focus in TPM2 on having it > be more of a cryptographic accelerator are we convinced that the > hardware is ever going to be fast enough for a model of having it > directly service large numbers of transactions in something like a > 'cloud' model? It's already in use as such today: https://tectonic.com/assets/pdf/TectonicTrustedComputing.pdf We're also planning something like this in the IBM Cloud. James