Hello CIP Core-WG and CIP Kernel-WG,

(CC CIP Security-WG).

Thank you for your help every time.

This is Djuned (CIP Security-WG) from Renesas,

To comply IEC-62443-4-2 CR 4.1 Information Confidentiality requirements for Data-at-rest,

CIP Security-WG performed analysis and decided to employ cryptsetup package.

To support and verify this package, we have discussion and report here:

• [CIP-Security] [CR4.1] Information confidentiality (Data encryption at rest) (#44) · Issues · cip-project / cip-security / iec_62443-4-x · GitLab
• Supporting data encryption at rest for IEC-62443-4-2 CR 4.1 (#29) · Issues · cip-project / cip-core / isar-cip-core · GitLab

Besides, we prepared series of patches:

<isar-cip-core>

• cip-core-image-security.bb: Add cryptsetup and fdisk packages (ec9f985f) · Commits · cip-project / cip-core / isar-cip-core · GitLab
• start-qemu: Create and add secure-image.img as /dev/vdb for cip-core-image-security (d6eaf0d2) · Commits · cip-project / cip-core / isar-cip-core · GitLab
• doc: Add README for IEC-62443-4-2 CR 4.1 Information Confidentiality (2de2aaa5) · Commits · cip-project / cip-core / isar-cip-core · GitLab

<cip-kernel-config>

• 5.10.y-cip/arm64: qemu_arm64_defconfig: Enable Crypto modules (40c4baf1) · Commits · cip-project / cip-kernel / cip-kernel-config · GitLab

Now, we ask for your help to check/review our patches before we create Pull-Requests.

Thank you,

with Best Regards,

Djuned Fernando DJUSDEK (Mr.)

djunedfernando.djusdek.wz@...

Software Business Development Department

Enterprise Infrastructure Business Division

IoT and Infrastructure Business Unit

Renesas Electronics Corporation