From mboxrd@z Thu Jan 1 00:00:00 1970 From: David Miller Subject: Re: [PATCH net v2 0/3] tls: don't leave keys in kernel memory Date: Thu, 13 Sep 2018 12:04:49 -0700 (PDT) Message-ID: <20180913.120449.306609831594032527.davem@davemloft.net> References: Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Cc: netdev@vger.kernel.org, aviadye@mellanox.com, borisp@mellanox.com, davejwatson@fb.com, vakul.garg@nxp.com To: sd@queasysnail.net Return-path: Received: from shards.monkeyblade.net ([23.128.96.9]:52754 "EHLO shards.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1727600AbeINAPi (ORCPT ); Thu, 13 Sep 2018 20:15:38 -0400 In-Reply-To: Sender: netdev-owner@vger.kernel.org List-ID: From: Sabrina Dubroca Date: Wed, 12 Sep 2018 17:44:40 +0200 > There are a few places where the RX/TX key for a TLS socket is copied > to kernel memory. This series clears those memory areas when they're no > longer needed. > > v2: add union tls_crypto_context, following Vakul Garg's comment > swap patch 2 and 3, using new union in patch 3 Series applied and queued up for -stable. Thanks.