aboutsummaryrefslogtreecommitdiff
path: root/cryptech_console
diff options
context:
space:
mode:
authorFredrik Thulin <fredrik@thulin.net>2016-06-23 16:41:38 +0200
committerFredrik Thulin <fredrik@thulin.net>2016-06-23 16:41:38 +0200
commit715159e83b97e78a779bfeb38d634decd8e499fc (patch)
tree873f61eed05c1a1787190e0b7ce717ab4e413516 /cryptech_console
parent52f1eb5c3dccd47d2434e0c7a302c23363790e1d (diff)
Implement master key for wrapping keys in the keystore.
The KEK (Key Encryption Key) is first fetched from the FPGA that gets it from the volatile Master Key Memory (that in theory has tamper*kek_len = len protection with wiping), and secondly from flash. The flash option is meant for development/evaluation use using an Alpha board where the Master Key Memory is not battery backed. For any serious use of an Alpha, an option is to enter the master key into the volatile MKM on each power-on as a way to unlock the keystore.
Diffstat (limited to 'cryptech_console')
0 files changed, 0 insertions, 0 deletions