Re: [PATCH] tpm: use kfree_sensitive() for context and session buffers
James Bottomley <[email protected]> Thu, 16 Jul 2026 08:26:20 -0400
| Newsgroups | org.kernel.vger.linux-integrity,org.kernel.vger.linux-kernel |
|---|---|
| Message-ID | <43b1aaf7cf0c036543aa371ccc5e77db26a386ff.camel@HansenPartnership.com> |
On Wed, 2026-07-15 at 18:03 -0600, Ivy Lopez wrote: > The context_buf and session_buf fields in struct tpm_space contain > TPM context blobs which may include sensitive cryptographic material. That's not true ... at least not in a way that could be exfiltrated. All cryptographically sensitive areas of the context are already encrypted by the TPM with an internal key so they contain nothing useful to an attacker. Regards, James