Re: NVMe: Add SPDM over the storage transport support

[Jonathan McDowell <noodles@earth.li>]

On Sat, Feb 21, 2026 at 01:38:49AM +0000, Wilfred Mallawa wrote:
>On Fri, 2026-02-20 at 17:18 +0000, Jonathan McDowell wrote:
>> On Fri, 3 Oct 2025 21:39:41 +1000, you wrote:
>> > This series extends the existing SPDM support in QEMU to support 
>> > the DSP0286 SPDM Storage Transport [1] for NVMe. SPDM Storage 
>> > Transport uses the NVMe Admin Security Send/Receive commands, as 
>> > such, support for these commands have also been added.
>>
>> > With the addition of a new `spdm-trans` CLI argument for NVMe 
>> > controllers, users can specify `spdm_trans=nvme` or 
>> > `spdm_trans=doe`.  This allows for the selection of the SPDM 
>> > transport. The `doe` option is the current default, `nvme` would 
>> > select SPDM Storage Transport for the controller, where SPDM 
>> > communication happens over the NVMe Admin Security Send/Receive 
>> > commands.
>>
>> > Support for DSP0286 already exists in `libspdm` [2] and support for 
>> > the QEMU SPDM server is being upstreamed for `spdm-utils` [3]. This 
>> > series was tested by using `spdm-utils` as the qemu SPDM server 
>> > with SPDM Storage Transport support built with `libspdm` v3.8.0, 
>> > and `spdm-utils` also as the SPDM requester.

>> Do you have a pointer to the correct spdm-utils version/branch to use 
>> for testing this? I tried wilfred/spdm-storage-v4, which appears to 
>> be the latest, but it fails to build, and the footnote in your mail 
>> is dangling.

>You should be able to use [1] in the host to setup the response server
>for QEMU. So after cargo build:
>
>```
>$ ./target/debug/spdm_utils --qemu-server --spdm-transport-protocol=storage response
>```
…
>Sorry for missing links and different branches... all of this should be
>upstream soon!

Thanks, the pointer to your add-spdm-storage-upstream-v6 branch is 
exactly what I needed to get things working.

root@debian-qemu-efi:~# nvme security-recv /dev/nvme0 --secp=0xe8 --spsp=0x0004 --size=32 --al=32
NVME Security Receive Command Success
        0  1  2  3  4  5  6  7  8  9  a  b  c  d  e  f
        0000: 20 00 00 10 00 00 00 00 66 00 00 00 00 00 00 00 "........f......."
        0010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 "................"

>[1]
>https://github.com/twilfredo/spdm-utils/tree/wilfred/add-spdm-storage-upstream-v6

J.

-- 
   < fivemack> it is bruter-force   |  .''`.  Debian GNU/Linux Developer
     than a really really stupid    | : :' :  Happy to accept PGP signed
   elephant [on his Python suduku   | `. `'   or encrypted mail - RSA
               solver]              |   `-    key on the keyservers.