<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Can you go into a little more details on what this repository
would do? A quick google of "storage key management" didn't
really turn up much in terms of specifics. Is there a spec or
design doc you could point us at?</p>
<p>Some initial questions I have (assuming this repo relates to key
management)<br>
</p>
<p>1. How would this repository relate to
phosphor-certificate-manager? Reimplementation of the same
interface? Different? What are the major differences that would
warrant not simply putting the implementation there? Some of my
confusion here is that phosphor-certificate-manager has an
implementation that can store certificates and private keys, and
has gone through many rounds of review on the interfaces. I'm
worried that another key manager would simply be duplicating
functionality that already exists (although I hope not).<br>
</p>
<p>2. What interfaces and workflows would this implementation
support? What does this implementation let us do that we can't do
already?</p>
<p>3. When you say the storage format is SKM specific, what does
that mean?<br>
</p>
<div class="moz-cite-prefix">-Ed<br>
</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix">On 12/6/18 10:19 AM, Kun Yi wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAGMNF6VE0JaN93hZT5_PNYgu-inpx5JTWk4NhpS6=VuBuxpEzA@mail.gmail.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<div dir="ltr">
<div dir="ltr">Hi Brad,
<div><br>
</div>
<div>May I request a new repository: phosphor-ipmi-blobs-skm?</div>
<div><br>
</div>
<div>It is a phosphor-ipmi-blobs[1] based handler that
supports simple binary data read/write/enumerate operations
from the host to a storage only visible to BMC. Google uses
it for storing Storage Key Management (SKM) specific binary
data, and it may probably belong to the openBMC
customizations that Google want to publish and permit others
to use.</div>
<div><br>
</div>
<div>Currently the storage format is skm specific, but it
could be expanded to support other use cases, thus the
"phosphor" naming. If you feel that it is still
Google-specific, then "google-ipmi-blobs-skm" is acceptable
as well. We can always rename this later if the use cases
expand. =)</div>
<div><br>
</div>
<div>Please add myself, Benjamin Fair (<a
href="mailto:benjaminfair@google.com"
moz-do-not-send="true">benjaminfair@google.com</a>), and
Patrick Venture (<a href="mailto:venture@google.com"
moz-do-not-send="true">venture@google.com</a>) as
maintainers. Thanks!</div>
<div>
<div><br>
</div>
<div>[1] <a
href="https://github.com/openbmc/phosphor-ipmi-blobs"
moz-do-not-send="true">https://github.com/openbmc/phosphor-ipmi-blobs</a></div>
-- <br>
<div dir="ltr" class="gmail_signature">
<div dir="ltr">Regards,
<div>Kun</div>
</div>
</div>
</div>
</div>
</div>
</blockquote>
</body>
</html>