From: Jonathan Cameron <jonathan.cameron@oss.qualcomm.com>
To: Jason Gunthorpe <jgg@nvidia.com>
Cc: "Alexandre Ghiti" <alex@ghiti.fr>,
"Albert Ou" <aou@eecs.berkeley.edu>,
"Ard Biesheuvel" <ardb@kernel.org>,
"Arnd Bergmann" <arnd@arndb.de>,
"Catalin Marinas" <catalin.marinas@arm.com>,
"Jonathan Corbet" <corbet@lwn.net>,
"David Sterba" <dsterba@suse.com>,
"Ilias Apalodimas" <ilias.apalodimas@linaro.org>,
linux-arch@vger.kernel.org, linux-arm-kernel@lists.infradead.org,
linux-doc@vger.kernel.org, linux-efi@vger.kernel.org,
linux-riscv@lists.infradead.org,
"Mark Rutland" <mark.rutland@arm.com>,
"Palmer Dabbelt" <palmer@dabbelt.com>,
"Paul Walmsley" <pjw@kernel.org>,
"Randy Dunlap" <rdunlap@infradead.org>,
"Simon Glass" <sjg@chromium.org>,
"Shuah Khan" <skhan@linuxfoundation.org>,
"Nick Terrell" <terrelln@fb.com>, "Will Deacon" <will@kernel.org>,
"Alexandre Ghiti" <alexghiti@rivosinc.com>,
"Conor Dooley" <conor.dooley@microchip.com>,
linux-integrity@vger.kernel.org,
"Palmer Dabbelt" <palmer@rivosinc.com>,
patches@lists.linux.dev, "Piotr Król" <piotr.krol@3mdeb.com>,
"Ross Philipson" <ross.philipson@gmail.com>,
"Sami Tolvanen" <samitolvanen@google.com>,
"Song Shuai" <songshuaishuai@tinylab.org>
Subject: Re: [PATCH v2 11/15] arm64: drtm: Add macro definitions for DEN0113
Date: Wed, 21 Oct 2026 10:43:36 -0700 [thread overview]
Message-ID: <20261021104336.00000437@oss.qualcomm.com> (raw)
In-Reply-To: <11-v2-989a18390eb1+486-arm64_drtm_jgg@nvidia.com>
On Fri, 2 Oct 2026 20:31:48 -0300
Jason Gunthorpe <jgg@nvidia.com> wrote:
> Taken from rev 1.4b of the spec, following the SMCC register layout and
> constant names.
>
> Signed-off-by: Jason Gunthorpe <jgg@nvidia.com>
Nice - appreciated the spec references as saved a bunch of searching.
A few really small comments inline. Either way
Reviewed-by: Jonathan Cameron <jonathan.cameron@oss.qualcomm.com>
> ---
> arch/arm64/include/asm/drtm.h | 304 ++++++++++++++++++++++++++++++++++
> 1 file changed, 304 insertions(+)
> create mode 100644 arch/arm64/include/asm/drtm.h
>
> diff --git a/arch/arm64/include/asm/drtm.h b/arch/arm64/include/asm/drtm.h
> new file mode 100644
> index 00000000000000..8188af1b582bb3
> --- /dev/null
> +++ b/arch/arm64/include/asm/drtm.h
> +/*
> + * The spec uses 4KB pages for sizes and alignment throughout, see v1.4B
> + * sections 3.3, 3.13, 3.14 and 3.15.
> + */
> +#define ARM_DRTM_PAGE_SIZE 4096
Maybe use SZ_4K from linux/sizes.h
> +/* v1.4B section 3.3 "DRTM_FEATURES" */
> +#define ARM_DRTM_SMC_FEATURES (ARM_DRTM_SMC_FN_BASE + 0x01)
> +/* X1 input parameter */
> +#define ARM_DRTM_FEATURE_SELECTOR BIT_U64(63)
Maybe define the alternate masking for function ID - for completeness if nothing else.
> +#define ARM_DRTM_FEATURE_ID_MASK GENMASK_U64(7, 0)
> +/*
> + * PCR schema numbers. ARM_DRTM_PCR_SCHEMA_MASK is a bitmap indexed by these,
> + * and the Launch Features ARM_DRTM_LAUNCH_PCR_SCHEMA_MASK field holds one.
> + */
Similar to below. Maybe this dual use is a bit fragile.
> +#define ARM_DRTM_PCR_SCHEMA_DEFAULT 0
> +#define ARM_DRTM_PCR_SCHEMA_AUTHORITIES 1
> +/* v1.4B Table 6 "DMA protection features" */
> +#define ARM_DRTM_FEATURE_DMA_PROTECTION 0x03
> +#define ARM_DRTM_DMA_PROTECTION_MASK GENMASK_U64(7, 0)
> +/* Only valid if ARM_DRTM_DMA_PROTECTION_REGION is supported */
> +#define ARM_DRTM_MAX_REGIONS_MASK GENMASK_U64(23, 8)
> +
> +/*
> + * DMA protection types. ARM_DRTM_DMA_PROTECTION_MASK is a bitmap indexed by
> + * these, and the Launch Features ARM_DRTM_LAUNCH_DMA_PROTECTION_MASK field
> + * holds one.
> + */
> +#define ARM_DRTM_DMA_PROTECTION_COMPLETE 0
> +#define ARM_DRTM_DMA_PROTECTION_REGION 1
The dual use of these for bitmap indexes in one place and
values in another seems fragile. Maybe it is better to have
different naming for the two even though the values match?
> +/* v1.4B section 3.4 "DRTM_DYNAMIC_LAUNCH" */
> +#define ARM_DRTM_SMC_DYNAMIC_LAUNCH (ARM_DRTM_SMC_FN_BASE + 0x04)
> +
> +/* v1.4B section 3.5 "DRTM_UNPROTECT_MEMORY" */
> +#define ARM_DRTM_SMC_UNPROTECT_MEMORY (ARM_DRTM_SMC_FN_BASE + 0x03)
> +
> +/* v1.4B section 3.6 "DRTM_CLOSE_LOCALITY" */
> +#define ARM_DRTM_SMC_CLOSE_LOCALITY (ARM_DRTM_SMC_FN_BASE + 0x05)
> +
> +/* v1.4B section 3.7 "DRTM_GET_ERROR" */
> +#define ARM_DRTM_SMC_GET_ERROR (ARM_DRTM_SMC_FN_BASE + 0x06)
> +
> +/* v1.4B section 3.8 "DRTM_SET_ERROR" */
I know I'm the one who asks for references, but maybe the SMC numbers are obvious
enough without given the name matches the spec section? The table references
etc below are excellent! The do no harm beyond a bit of bloat though so I don't
mind if you want to keep them.
> +#define ARM_DRTM_SMC_SET_ERROR (ARM_DRTM_SMC_FN_BASE + 0x07)
> +
> +/* v1.4B Table 8 "Definition for error IDs (Bits[10:3])" */
> +#define ARM_DRTM_ERROR_ID_NONE 0x0
> +#define ARM_DRTM_ERROR_ID_PARAMETERS 0x2
> +#define ARM_DRTM_ERROR_ID_SECURE_EXCEPTION 0x3
> +#define ARM_DRTM_ERROR_ID_TCB_HASH_UNLOCKED 0x4
I'd use NOT_LOCKED to align with spec. Maybe it makes a subtle
difference somewhere? UNLOCKED might imply a transition to that
state, where as NOT_LOCKED doesn't. Meh, doesn't really matter
as I'm probably over thinking this.
> +#define ARM_DRTM_ERROR_ID_TPM 0x5
> +#define ARM_DRTM_ERROR_ID_SIGNATURE 0x6
> +#define ARM_DRTM_ERROR_ID_IMAGE_FORMAT 0x7
> +#define ARM_DRTM_ERROR_ID_VENDOR 0xFF
> +/*
> + * v1.4b Section 3.3.1 says:
> + * A return value of greater than 0 means the feature ID is
> + * implemented, and there are other feature-specific
> + * feature or capability bits available in other return value
> + * registers.
I'd wrap to 80 chars.
> + * And for FEATURE_SELECTOR all defined features return data in other
> + * registers, so 0 is not an allowed return.
> + */
> +static inline s64 arm_drtm_query_feature(u64 feature, u64 *value)
> +{
> + struct arm_smccc_res res;
> +
> + arm_smccc_1_1_smc(ARM_DRTM_SMC_FEATURES,
> + ARM_DRTM_FEATURE_SELECTOR |
> + FIELD_PREP(ARM_DRTM_FEATURE_ID_MASK, feature),
> + 0, 0, 0, 0, 0, 0, &res);
> + *value = res.a1;
> + return res.a0;
> +}
> +
> +#endif /* !__ASSEMBLY__ */
> +#endif /* __ASM_DRTM_H */
next prev parent reply other threads:[~2026-10-21 17:43 UTC|newest]
Thread overview: 37+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-10-02 23:31 [PATCH v2 00/15] arm64: DRTM, boot portion Jason Gunthorpe
2026-10-02 23:31 ` [PATCH v2 01/15] efi/libstub: Fix error unwind freeing fdt in allocate_new_fdt_and_exit_boot() Jason Gunthorpe
2026-10-02 23:31 ` [PATCH v2 02/15] efi/riscv: libstub: Don't set image_size in handle_kernel_image() Jason Gunthorpe
2026-10-21 16:00 ` Jonathan Cameron
2026-10-02 23:31 ` [PATCH v2 03/15] efi/libstub: Free cmdline_ptr in efi_pe_entry Jason Gunthorpe
2026-10-21 16:08 ` Jonathan Cameron
2026-10-02 23:31 ` [PATCH v2 04/15] efi/libstub: Add a general way to get symbols from the vmlinux into zboot Jason Gunthorpe
2026-10-21 16:16 ` Jonathan Cameron
2026-10-02 23:31 ` [PATCH v2 05/15] arm64/efi: Use CONFIG_EFI_STUB_IMAGE_INFO for code_size Jason Gunthorpe
2026-10-02 23:31 ` [PATCH v2 06/15] efi/zboot: Lift efi_cache_sync_image() from efi_zboot_decompress() Jason Gunthorpe
2026-10-21 16:33 ` Jonathan Cameron
2026-10-02 23:31 ` [PATCH v2 07/15] efi/libstub: Add generic arch callbacks for DRTM Jason Gunthorpe
2026-10-21 16:51 ` Jonathan Cameron
2026-10-02 23:31 ` [PATCH v2 08/15] efi/libstub: Have efi_kaslr_relocate_kernel() handle extra_size Jason Gunthorpe
2026-10-21 17:06 ` Jonathan Cameron
2026-10-02 23:31 ` [PATCH v2 09/15] efi: Add a __efi_data_handoff section annotation Jason Gunthorpe
2026-10-02 23:31 ` [PATCH v2 10/15] efi/libstub: Put the stub's writable data in unique sections for DRTM Jason Gunthorpe
2026-10-02 23:31 ` [PATCH v2 11/15] arm64: drtm: Add macro definitions for DEN0113 Jason Gunthorpe
2026-10-21 17:43 ` Jonathan Cameron [this message]
2026-10-02 23:31 ` [PATCH v2 12/15] arm64: drtm: Update the linker script for EFI_STUB_DRTM Jason Gunthorpe
2026-10-20 22:49 ` Yeoreum Yun
2026-10-21 12:20 ` Jason Gunthorpe
2026-10-02 23:31 ` [PATCH v2 13/15] arm64: drtm: Add drtm_entry point to head.S Jason Gunthorpe
2026-10-02 23:31 ` [PATCH v2 14/15] arm64: drtm: Call UNPROTECT_MEMORY Jason Gunthorpe
2026-10-21 17:47 ` Jonathan Cameron
2026-10-21 17:50 ` Jason Gunthorpe
2026-10-02 23:31 ` [PATCH v2 15/15] efi/arm64: Implement ARM64 DRTM in the stub Jason Gunthorpe
2026-10-16 16:54 ` Jason Gunthorpe
2026-10-20 23:24 ` Yeoreum Yun
2026-10-20 23:34 ` Jason Gunthorpe
2026-10-21 6:14 ` Yeoreum Yun
2026-10-21 8:08 ` Yeoreum Yun
2026-10-21 14:06 ` Jason Gunthorpe
2026-10-21 14:17 ` Yeoreum Yun
2026-10-21 18:11 ` Jonathan Cameron
2026-10-06 10:30 ` [PATCH v2 00/15] arm64: DRTM, boot portion Ard Biesheuvel
2026-10-16 16:51 ` Jason Gunthorpe
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20261021104336.00000437@oss.qualcomm.com \
--to=jonathan.cameron@oss.qualcomm.com \
--cc=alex@ghiti.fr \
--cc=alexghiti@rivosinc.com \
--cc=aou@eecs.berkeley.edu \
--cc=ardb@kernel.org \
--cc=arnd@arndb.de \
--cc=catalin.marinas@arm.com \
--cc=conor.dooley@microchip.com \
--cc=corbet@lwn.net \
--cc=dsterba@suse.com \
--cc=ilias.apalodimas@linaro.org \
--cc=jgg@nvidia.com \
--cc=linux-arch@vger.kernel.org \
--cc=linux-arm-kernel@lists.infradead.org \
--cc=linux-doc@vger.kernel.org \
--cc=linux-efi@vger.kernel.org \
--cc=linux-integrity@vger.kernel.org \
--cc=linux-riscv@lists.infradead.org \
--cc=mark.rutland@arm.com \
--cc=palmer@dabbelt.com \
--cc=palmer@rivosinc.com \
--cc=patches@lists.linux.dev \
--cc=piotr.krol@3mdeb.com \
--cc=pjw@kernel.org \
--cc=rdunlap@infradead.org \
--cc=ross.philipson@gmail.com \
--cc=samitolvanen@google.com \
--cc=sjg@chromium.org \
--cc=skhan@linuxfoundation.org \
--cc=songshuaishuai@tinylab.org \
--cc=terrelln@fb.com \
--cc=will@kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox