From 715159e83b97e78a779bfeb38d634decd8e499fc Mon Sep 17 00:00:00 2001
From: Fredrik Thulin <fredrik@thulin.net>
Date: Thu, 23 Jun 2016 16:41:38 +0200
Subject: Implement master key for wrapping keys in the keystore.

The KEK (Key Encryption Key) is first fetched from the FPGA that gets it
from the volatile Master Key Memory (that in theory has tamper*kek_len =
len protection with wiping), and secondly from flash.

The flash option is meant for development/evaluation use using an Alpha
board where the Master Key Memory is not battery backed. For any serious
use of an Alpha, an option is to enter the master key into the volatile
MKM on each power-on as a way to unlock the keystore.
---
 GNUmakefile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'GNUmakefile')

diff --git a/GNUmakefile b/GNUmakefile
index 14e94c6..151ce5c 100644
--- a/GNUmakefile
+++ b/GNUmakefile
@@ -118,7 +118,7 @@ ifeq "${KS}" "mmap"
 else ifeq "${KS}" "volatile"
   KS_OBJ += ks_volatile.o
 else ifeq "${KS}" "flash"
-  KS_OBJ += ks_flash.o
+  KS_OBJ += ks_flash.o masterkey.o
 endif
 
 # RPC_MODE = none | server | client-simple | client-mixed
-- 
cgit v1.2.3