[PATCH] qemu: Report sev measurement value and nonce explicitly

Michal Prívozník mprivozn at redhat.com
Mon Oct 17 07:42:12 UTC 2022


On 10/16/22 22:06, Cole Robinson wrote:
> The value returned by qemu's query-sev-launch-measure comes
> straight from the LAUNCH_MEASURE SEV firmware command. It's two
> values packed together: first 32 bytes is the launch measurement,
> last 16 bytes is the nonce.
> 
> This combined value is really just an artifact of the return value
> of the firmware command, it has no direct usage. Users want the two
> individual values. But because qemu and libvirt do not separate them
> apart, every app that wants to process this value will have to do
> it manually.
> 
> This performs the split for the user, and delivers the values in two
> new TYPED_PARAM fields: sev-measurement-value, sev-measurement-nonce
> 
> Signed-off-by: Cole Robinson <crobinso at redhat.com>
> ---
>  include/libvirt/libvirt-domain.h | 22 ++++++++++++++++++++++
>  src/qemu/qemu_driver.c           | 23 +++++++++++++++++++++++
>  2 files changed, 45 insertions(+)
> 

Reviewed-by: Michal Privoznik <mprivozn at redhat.com>

Michal



More information about the libvir-list mailing list