All of lore.kernel.org
 help / color / mirror / Atom feed
From: Lu Ken <ken.lu@intel.com>
To: grub-devel@gnu.org
Cc: dkiper@net-space.pl, min.m.xu@intel.com, Lu Ken <ken.lu@intel.com>
Subject: [PATCH V4 0/3] Enable TDX measurement to RTMR register
Date: Wed, 13 Jul 2022 10:06:09 +0800	[thread overview]
Message-ID: <cover.1657673336.git.ken.lu@intel.com> (raw)

Intel Trust Domain Extensions(Intel TDX) refers to an Intel technology
that extends Virtual Machine Extensions(VMX) and Multi-Key Total Memory
Encryption(MK-TME) with a new kind of virtual machine guest called a
Trust Domain(TD)[1]. A TD runs in a CPU mode that protects the confidentiality
of its memory contents and its CPU state from any other software, including
the hosting Virtual Machine Monitor (VMM).

Trust Domain Virtual Firmware (TDVF) is required to provide TD services to
the TD guest OS.[2] Its reference code is available at https://github.com/tianocore/edk2-staging/tree/TDVF.

To support TD measurement/attestation, TDs provide 4 RTMR registers like
TPM/TPM2 PCR as below:
- RTMR[0] is for TDVF configuration
- RTMR[1] is for the TD OS loader and kernel
- RTMR[2] is for the OS application
- RTMR[3] is reserved for special usage only

This patch adds TD Measurement protocol support along with TPM/TPM2 protocol.

References:
[1] https://software.intel.com/content/dam/develop/external/us/en/documents/tdx-whitepaper-v4.pdf
[2] https://software.intel.com/content/dam/develop/external/us/en/documents/tdx-virtual-firmware-design-guide-rev-1.pdf

Lu Ken (3):
  efi/tpm.c: Refine the status of log event
  efi/tpm.c: Uses grub_strcpy() to replace grub_memcpy()
  efi/tpm.c: Enable EFI_CC_MEASUREMENT_PROTOCOL

 grub-core/commands/efi/tpm.c |  64 ++++++++++++--
 include/grub/efi/cc.h        | 158 +++++++++++++++++++++++++++++++++++
 2 files changed, 215 insertions(+), 7 deletions(-)
 create mode 100644 include/grub/efi/cc.h

--
2.31.1



             reply	other threads:[~2022-07-13  2:06 UTC|newest]

Thread overview: 6+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2022-07-13  2:06 Lu Ken [this message]
2022-07-13  2:06 ` [PATCH V4 1/3] efi/tpm.c: Refine the status of log event Lu Ken
2022-07-13  2:06 ` [PATCH V4 2/3] efi/tpm.c: Uses grub_strcpy() to replace grub_memcpy() Lu Ken
2022-07-13  2:06 ` [PATCH V4 3/3] efi/tpm.c: Enable EFI_CC_MEASUREMENT_PROTOCOL Lu Ken
2022-07-19 13:52 ` [PATCH V4 0/3] Enable TDX measurement to RTMR register Daniel Kiper
2022-07-20  2:52   ` Lu, Ken

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=cover.1657673336.git.ken.lu@intel.com \
    --to=ken.lu@intel.com \
    --cc=dkiper@net-space.pl \
    --cc=grub-devel@gnu.org \
    --cc=min.m.xu@intel.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.