[libvirt] [Qemu-devel] libvirt/QEMU/SEV interaction
Dr. David Alan Gilbert
dgilbert at redhat.com
Wed Oct 18 19:18:48 UTC 2017
* Michael S. Tsirkin (mst at redhat.com) wrote:
> On Fri, Sep 08, 2017 at 10:48:10AM -0500, Brijesh Singh wrote:
> > > > > 11. GO verifies the measurement and if measurement matches then it may
> > > > > give a secret blob -- which must be injected into the guest before
> > > > > libvirt starts the VM. If verification failed, GO will request cloud
> > > > > provider to destroy the VM.
> I realised I'm missing something here: how does GO limit the
> secret to the specific VM? For example, what prevents hypervisor
> from launching two VMs with the same GO's DH, getting measurement
> from 1st one but injecting the secret into the second one?
Isn't that the 'trusted channel nonce currently associated with the
guest' in the guest context?
Dr. David Alan Gilbert / dgilbert at redhat.com / Manchester, UK
More information about the libvir-list