On Mon, 31 Aug 2026 17:47:59 +0200, Jorge Ramirez-Ortiz wrote:
This series makes UFS RPMB work out of the box with an OP-TEE that implements the standard eMMC RPMB key-derivation flow, without requiring any fundamental changes on the OP-TEE side.
RPMB provides an authenticated, replay-protected storage area whose security relies on a secret authentication key. In our setup that key is never exposed to the kernel: OP-TEE derives it in the secure world from its hardware-unique key and a device identifier (dev_id) that the RPMB core hands down. OP-TEE's implementation targets eMMC, where dev_id is the 16-byte eMMC CID, and both the fixed length and the raw-CID layout are baked into its key derivation.
[...]
Applied to 7.4/scsi-queue, thanks!
[1/2] ufs: rpmb: retry power-on UNIT ATTENTION on the RPMB WLUN https://git.kernel.org/mkp/scsi/c/a8a34238e5e6 [2/2] ufs: rpmb: use a fixed-length RPMB dev_id https://git.kernel.org/mkp/scsi/c/657eff806d38