diff --git a/Documentation/security/keys/trusted-encrypted.rst b/Documentation/security/keys/trusted-encrypted.rst index 2bcaaa7d119b..eae6a36b1c9a 100644 --- a/Documentation/security/keys/trusted-encrypted.rst +++ b/Documentation/security/keys/trusted-encrypted.rst @@ -14,10 +14,11 @@ Trusted Keys as Protected key ============================= It is the secure way of keeping the keys in the kernel key-ring as Trusted-Key, such that: + - Key-blob, an encrypted key-data, created to be stored, loaded and seen by - userspace. + userspace. - Key-data, the plain-key text in the system memory, to be used by - kernel space only. + kernel space only. Though key-data is not accessible to the user-space in plain-text, but it is in plain-text in system memory, when used in kernel space. Even though kernel-space