Bug 11070 - whole-disk encryption
Summary: whole-disk encryption
Status: RESOLVED FIXED
Alias: None
Product: IoT Reference OS Kit
Classification: Yocto Project Subprojects
Component: intel-iot-refkit-security (show other bugs)
Version: unspecified
Hardware: x86 x86_64
: Medium enhancement
Target Milestone: 2.3 M4
Assignee: Patrick Ohly
QA Contact:
URL:
Whiteboard:
Depends on: 11071 11276
Blocks: 11072 11205
  Show dependency tree
 
Reported: 2017-02-17 13:38 UTC by Patrick Ohly
Modified: 2017-04-18 13:07 UTC (History)
2 users (show)

See Also:
OS type for building Yocto: ---
Type of Regression: ---
Verified:
Documentation change: No (bug/feature does not impact docs)

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Patrick Ohly 2017-02-17 13:38:16 UTC 
Reference Kit must provide mechanism based on whole-disk encryption to store data in a secure manner.

The proposed solution uses per-machine key stored in TPM NVRAM. The encrypted disk gets set up by the installer image.
Comment 1 Patrick Ohly 2017-03-03 16:53:08 UTC 
Missing: automated tests, documentation
Comment 2 Patrick Ohly 2017-03-31 10:15:03 UTC 
See https://github.com/intel/intel-iot-refkit/pull/97 for the code, documentation and tests under review at the moment.
Comment 3 Mikko Ylinen 2017-04-18 13:07:30 UTC 
Resolving on behalf of Patrick.