diff options
| author | Fredrik Thulin <fredrik@thulin.net> | 2016-06-23 16:41:38 +0200 |
|---|---|---|
| committer | Fredrik Thulin <fredrik@thulin.net> | 2016-06-23 16:41:38 +0200 |
| commit | 715159e83b97e78a779bfeb38d634decd8e499fc (patch) | |
| tree | 873f61eed05c1a1787190e0b7ce717ab4e413516 /cryptech_console | |
| parent | 52f1eb5c3dccd47d2434e0c7a302c23363790e1d (diff) | |
Implement master key for wrapping keys in the keystore.
The KEK (Key Encryption Key) is first fetched from the FPGA that gets it
from the volatile Master Key Memory (that in theory has tamper*kek_len =
len protection with wiping), and secondly from flash.
The flash option is meant for development/evaluation use using an Alpha
board where the Master Key Memory is not battery backed. For any serious
use of an Alpha, an option is to enter the master key into the volatile
MKM on each power-on as a way to unlock the keystore.
Diffstat (limited to 'cryptech_console')
0 files changed, 0 insertions, 0 deletions