[PATCH 4/4] security/keys: zeroize key payloads before kdump

Jarkko Sakkinen jarkko at kernel.org
Mon Aug 10 08:31:06 PDT 2026


On Fri, Jul 31, 2026 at 11:50:11PM +0100, David Howells wrote:
> I've no particular objection to this, though I'd prefer the name 'wipe' to
> 'zeroize'.

LOL, I responded exactly same before reading your response :-)

So yeah, +1 to this.

> 
> You should also wipe fscrypt, tls, rxrpc*, ceph and cifs spnego type keys and
> maybe asymmetric type keys.
> 
> David
> 


BR< Jarkko



More information about the kexec mailing list