linux-kernel - Re: [PATCH v18 001/121] x86/virt/tdx: Export TDX KeyID information

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20240226184654.GG177224@ls.amr.corp.intel.com>
Date: Mon, 26 Feb 2024 10:46:54 -0800
From: Isaku Yamahata <isaku.yamahata@...ux.intel.com>
To: Yuan Yao <yuan.yao@...ux.intel.com>
Cc: isaku.yamahata@...el.com, kvm@...r.kernel.org,
	linux-kernel@...r.kernel.org, isaku.yamahata@...il.com,
	Paolo Bonzini <pbonzini@...hat.com>, erdemaktas@...gle.com,
	Sean Christopherson <seanjc@...gle.com>,
	Sagi Shahar <sagis@...gle.com>, Kai Huang <kai.huang@...el.com>,
	chen.bo@...el.com, hang.yuan@...el.com, tina.zhang@...el.com,
	isaku.yamahata@...ux.intel.com
Subject: Re: [PATCH v18 001/121] x86/virt/tdx: Export TDX KeyID information

On Thu, Feb 01, 2024 at 09:57:29AM +0800,
Yuan Yao <yuan.yao@...ux.intel.com> wrote:

> On Mon, Jan 22, 2024 at 03:52:37PM -0800, isaku.yamahata@...el.com wrote:
> > From: Kai Huang <kai.huang@...el.com>
> >
> > Each TDX guest must be protected by its own unique TDX KeyID.  KVM will
> > need to tell the TDX module the unique KeyID for a TDX guest when KVM
> > creates it.
> >
> > Export the TDX KeyID range that can be used by TDX guests for KVM to
> > use.  KVM can then manage these KeyIDs and assign one for each TDX guest
> > when it is created.
> >
> > Each TDX guest has a root control structure called "Trust Domain Root"
> > (TDR).  Unlike the rest of the TDX guest, the TDR is protected by the
> > TDX global KeyID.  When tearing down the TDR, KVM will need to pass the
> > TDX global KeyID explicitly to the TDX module to flush cache associated
> > to the TDR.
> >
> > Also export the TDX global KeyID for KVM to tear down the TDR.
> >
> > Signed-off-by: Kai Huang <kai.huang@...el.com>
> 
> The variables exported by this patch are used first time in patch 18 IIUC...
> So how about move this one just before the patch 18 ?

With v19, I put those tdx host patches in the first part.
-- 
Isaku Yamahata <isaku.yamahata@...ux.intel.com>