Coupling Key-Ring and Linux Crypto-API Framework via Crypto-Transformation

Explore a conference talk that delves into the coupling of Key-Ring and Linux Crypto-API Framework (LCF) through Crypto-Transformation (tfm). Learn about the importance of additional key attributes beyond traditional cryptographic key attributes and their role in dictating proper key usage. Discover the current limitations in the Linux system where the Kernel's Crypto-API lacks connection with the keyring, potentially compromising system security. Understand the proposed mechanism for linking the Crypto-API with the keyring, enabling the availability of additional key attributes to the API. Gain insights into how this coupling can enhance security by allowing the Crypto-API driver to validate key attributes and perform only permitted crypto operations. Dive deep into the detailed presentation of this method, offered by Pankaj Gupta and Varun Sethi from NXP Semiconductor, in this 27-minute talk from the Linux Foundation.