[edk2-devel] [PATCH v3 09/11] OvmfPkg/AmdSev: reserve MEMFD space for for firmware config hashes

[Brijesh Singh via groups.io]

On 7/20/21 3:03 AM, Dov Murik wrote:
> From: James Bottomley <jejb at linux.ibm.com>
> 
> Split the existing 4KB page reserved for SEV launch secrets into two
> parts: first 3KB for SEV launch secrets and last 1KB for firmware
> config hashes.
> 
> The area of the firmware config hashes will be attested (measured) by
> the PSP and thus the untrusted VMM can't pass in different files from
> what the guest owner allows.
> 
> Declare this in the Reset Vector table using GUID
> 7255371f-3a3b-4b04-927b-1da6efa8d454 and a uint32_t table of a base
> and size value (similar to the structure used to declare the launch
> secret block).
> 
> Cc: Ard Biesheuvel <ardb+tianocore at kernel.org>
> Cc: Jordan Justen <jordan.l.justen at intel.com>
> Cc: Ashish Kalra <ashish.kalra at amd.com>
> Cc: Brijesh Singh <brijesh.singh at amd.com>
> Cc: Erdem Aktas <erdemaktas at google.com>
> Cc: James Bottomley <jejb at linux.ibm.com>
> Cc: Jiewen Yao <jiewen.yao at intel.com>
> Cc: Min Xu <min.m.xu at intel.com>
> Cc: Tom Lendacky <thomas.lendacky at amd.com>
> Ref: https://bugzilla.tianocore.org/show_bug.cgi?id=3457
> Co-developed-by: Dov Murik <dovmurik at linux.ibm.com>
> Signed-off-by: Dov Murik <dovmurik at linux.ibm.com>
> Signed-off-by: James Bottomley <jejb at linux.ibm.com>
> Reviewed-by: Tom Lendacky <thomas.lendacky at amd.com>

Reviewed-by: Brijesh Singh <brijesh.singh at amd.com>

thanks


-=-=-=-=-=-=-=-=-=-=-=-
Groups.io Links: You receive all messages sent to this group.
View/Reply Online (#77976): https://edk2.groups.io/g/devel/message/77976
Mute This Topic: https://groups.io/mt/84328240/1813853
Group Owner: devel+owner at edk2.groups.io
Unsubscribe: https://edk2.groups.io/g/devel/unsub [edk2-devel-archive at redhat.com]
-=-=-=-=-=-=-=-=-=-=-=-