openstlinux/linux-st
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
a685d99208621b39dd0764e2bfdddfd19bb080f2
linux-st/drivers/crypto
History
Brijesh Singh 2c07ded064 KVM/SVM: add support for SEV attestation command 
The SEV FW version >= 0.23 added a new command that can be used to query
the attestation report containing the SHA-256 digest of the guest memory
encrypted through the KVM_SEV_LAUNCH_UPDATE_{DATA, VMSA} commands and
sign the report with the Platform Endorsement Key (PEK).

See the SEV FW API spec section 6.8 for more details.

Note there already exist a command (KVM_SEV_LAUNCH_MEASURE) that can be
used to get the SHA-256 digest. The main difference between the
KVM_SEV_LAUNCH_MEASURE and KVM_SEV_ATTESTATION_REPORT is that the latter
can be called while the guest is running and the measurement value is
signed with PEK.

Cc: James Bottomley <jejb@linux.ibm.com>
Cc: Tom Lendacky <Thomas.Lendacky@amd.com>
Cc: David Rientjes <rientjes@google.com>
Cc: Paolo Bonzini <pbonzini@redhat.com>
Cc: Sean Christopherson <seanjc@google.com>
Cc: Borislav Petkov <bp@alien8.de>
Cc: John Allen <john.allen@amd.com>
Cc: Herbert Xu <herbert@gondor.apana.org.au>
Cc: linux-crypto@vger.kernel.org
Reviewed-by: Tom Lendacky <thomas.lendacky@amd.com>
Acked-by: David Rientjes <rientjes@google.com>
Tested-by: James Bottomley <jejb@linux.ibm.com>
Signed-off-by: Brijesh Singh <brijesh.singh@amd.com>
Message-Id: <20210104151749.30248-1-brijesh.singh@amd.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
2021-02-04 05:27:20 -05:00
..
allwinner
Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2020-12-14 12:18:19 -08:00
amcc
crypto: sha - split sha.h into sha1.h and sha2.h
2020-11-20 14:45:33 +11:00
amlogic
…
axis
crypto: sha - split sha.h into sha1.h and sha2.h
2020-11-20 14:45:33 +11:00
bcm
crypto: sha - split sha.h into sha1.h and sha2.h
2020-11-20 14:45:33 +11:00
caam
Merge tag 'net-next-5.11' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next
2020-12-15 13:22:29 -08:00
cavium
crypto: cpt - Fix sparse warnings in cptpf
2020-12-04 18:13:15 +11:00
ccp
KVM/SVM: add support for SEV attestation command
2021-02-04 05:27:20 -05:00
ccree
crypto: ccree - rework cache parameters handling
2020-11-27 17:13:49 +11:00
chelsio
crypto: sha - split sha.h into sha1.h and sha2.h
2020-11-20 14:45:33 +11:00
hisilicon
crypto: hisilicon/trng - replace atomic_add_return()
2020-12-11 21:12:05 +11:00
inside-secure
crypto: sha - split sha.h into sha1.h and sha2.h
2020-11-20 14:45:33 +11:00
keembay
crypto: keembay - Add dependency on HAS_IOMEM
2020-12-23 18:45:22 +11:00
marvell
crypto: marvell/octeontx - Use dma_set_mask_and_coherent to simplify code
2020-11-27 17:13:48 +11:00
mediatek
crypto: sha - split sha.h into sha1.h and sha2.h
2020-11-20 14:45:33 +11:00
nx
crypto: sha - split sha.h into sha1.h and sha2.h
2020-11-20 14:45:33 +11:00
qat
crypto: qat - add CRYPTO_AES to Kconfig dependencies
2020-12-23 18:45:23 +11:00
qce
crypto: qce - Fix SHA result buffer corruption issues
2020-11-27 17:13:40 +11:00
rockchip
crypto: sha - split sha.h into sha1.h and sha2.h
2020-11-20 14:45:33 +11:00
stm32
crypto: sha - split sha.h into sha1.h and sha2.h
2020-11-20 14:45:33 +11:00
ux500
crypto: sha - split sha.h into sha1.h and sha2.h
2020-11-20 14:45:33 +11:00
virtio
…
vmx
…
xilinx
…
atmel-aes-regs.h
…
atmel-aes.c
…
atmel-authenc.h
crypto: sha - split sha.h into sha1.h and sha2.h
2020-11-20 14:45:33 +11:00
atmel-ecc.c
…
atmel-i2c.c
…
atmel-i2c.h
…
atmel-sha204a.c
…
atmel-sha-regs.h
…
atmel-sha.c
crypto: sha - split sha.h into sha1.h and sha2.h
2020-11-20 14:45:33 +11:00
atmel-tdes-regs.h
…
atmel-tdes.c
…
exynos-rng.c
…
geode-aes.c
…
geode-aes.h
…
hifn_795x.c
…
img-hash.c
crypto: sha - split sha.h into sha1.h and sha2.h
2020-11-20 14:45:33 +11:00
ixp4xx_crypto.c
crypto: sha - split sha.h into sha1.h and sha2.h
2020-11-20 14:45:33 +11:00
Kconfig
crypto: atmel-i2c - select CONFIG_BITREVERSE
2020-12-11 21:12:06 +11:00
Makefile
crypto: keembay - Add support for Keem Bay OCS AES/SM4
2020-12-11 21:12:05 +11:00
mxs-dcp.c
crypto: sha - split sha.h into sha1.h and sha2.h
2020-11-20 14:45:33 +11:00
n2_asm.S
…
n2_core.c
crypto: sha - split sha.h into sha1.h and sha2.h
2020-11-20 14:45:33 +11:00
n2_core.h
…
omap-aes-gcm.c
…
omap-aes.c
crypto: omap-aes - Fix PM disable depth imbalance in omap_aes_probe
2020-11-20 14:45:34 +11:00
omap-aes.h
…
omap-crypto.c
…
omap-crypto.h
…
omap-des.c
…
omap-sham.c
crypto: sha - split sha.h into sha1.h and sha2.h
2020-11-20 14:45:33 +11:00
padlock-aes.c
…
padlock-sha.c
crypto: sha - split sha.h into sha1.h and sha2.h
2020-11-20 14:45:33 +11:00
picoxcell_crypto_regs.h
…
picoxcell_crypto.c
crypto: sha - split sha.h into sha1.h and sha2.h
2020-11-20 14:45:33 +11:00
qcom-rng.c
…
s5p-sss.c
crypto: sha - split sha.h into sha1.h and sha2.h
2020-11-20 14:45:33 +11:00
sa2ul.c
crypto: sha - split sha.h into sha1.h and sha2.h
2020-11-20 14:45:33 +11:00
sa2ul.h
crypto: sha - split sha.h into sha1.h and sha2.h
2020-11-20 14:45:33 +11:00
sahara.c
crypto: sha - split sha.h into sha1.h and sha2.h
2020-11-20 14:45:33 +11:00
talitos.c
crypto: sha - split sha.h into sha1.h and sha2.h
2020-11-20 14:45:33 +11:00
talitos.h
…