linux-kernel - [GIT PULL] x86/tdx for 6.2

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:   Mon, 12 Dec 2022 11:15:25 -0800
From:   Dave Hansen <dave.hansen@...ux.intel.com>
To:     Linus Torvalds <torvalds@...ux-foundation.org>
Cc:     linux-kernel@...r.kernel.org, x86@...nel.org
Subject: [GIT PULL] x86/tdx for 6.2

Hi Linus,

Please pull some x86/tdx changes for v6.2.

This includes a single chunk of new functionality for TDX guests
which allows them to talk to the trusted TDX module software and
obtain an attestation report.  This report can then be used to
prove the trustworthiness of the guest to a third party and get
access to things like storage encryption keys.

--

The following changes since commit 094226ad94f471a9f19e8f8e7140a09c2625abaa:

  Linux 6.1-rc5 (2022-11-13 13:12:55 -0800)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git tags/x86_tdx_for_6.2

for you to fetch changes up to 00e07cfbdf0b232f7553f0175f8f4e8d792f7e90:

  selftests/tdx: Test TDX attestation GetReport support (2022-11-17 11:04:28 -0800)

----------------------------------------------------------------
Add TDX guest attestation infrastructure and driver

----------------------------------------------------------------
Kuppuswamy Sathyanarayanan (3):
      x86/tdx: Add a wrapper to get TDREPORT0 from the TDX Module
      virt: Add TDX guest driver
      selftests/tdx: Test TDX attestation GetReport support

 Documentation/virt/coco/tdx-guest.rst        |  52 +++++++++
 Documentation/virt/index.rst                 |   1 +
 Documentation/x86/tdx.rst                    |  43 +++++++
 arch/x86/coco/tdx/tdx.c                      |  40 +++++++
 arch/x86/include/asm/tdx.h                   |   2 +
 drivers/virt/Kconfig                         |   2 +
 drivers/virt/Makefile                        |   1 +
 drivers/virt/coco/tdx-guest/Kconfig          |  10 ++
 drivers/virt/coco/tdx-guest/Makefile         |   2 +
 drivers/virt/coco/tdx-guest/tdx-guest.c      | 102 +++++++++++++++++
 include/uapi/linux/tdx-guest.h               |  42 +++++++
 tools/testing/selftests/Makefile             |   1 +
 tools/testing/selftests/tdx/Makefile         |   7 ++
 tools/testing/selftests/tdx/config           |   1 +
 tools/testing/selftests/tdx/tdx_guest_test.c | 163 +++++++++++++++++++++++++++
 15 files changed, 469 insertions(+)
 create mode 100644 Documentation/virt/coco/tdx-guest.rst
 create mode 100644 drivers/virt/coco/tdx-guest/Kconfig
 create mode 100644 drivers/virt/coco/tdx-guest/Makefile
 create mode 100644 drivers/virt/coco/tdx-guest/tdx-guest.c
 create mode 100644 include/uapi/linux/tdx-guest.h
 create mode 100644 tools/testing/selftests/tdx/Makefile
 create mode 100644 tools/testing/selftests/tdx/config
 create mode 100644 tools/testing/selftests/tdx/tdx_guest_test.c