From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id BD8C0CC6B03 for ; Tue, 13 Oct 2026 13:06:03 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20210309; h=Sender:List-Subscribe:List-Help :List-Post:List-Archive:List-Unsubscribe:List-Id:Content-Transfer-Encoding: Content-Type:In-Reply-To:From:References:CC:To:Subject:MIME-Version:Date: Message-ID:Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Owner; bh=wYQuXQ0KfHa17CDRJUy3J57K/iJLMTM6lvkW2CcSDiQ=; b=1K5dvkM6Ia8aocADl76qCiJ9qo ecP3+FN/1QAIgvo5tstr0bCeVc/1yrpnIsuT85Z/7d+3tn/mkq9ghY6ChYY9GE92p2i5HFZvObZkh vJX65ZuhWHbDVHVg9sXILWI6sQlCHcziF5iI7OThqzXHBYpFHVmLk2kSbAAk6440KMnd1bFXAnxSP KPC0vQwpyB5udDLlK1q2Bb+mJvUjLDXg6UW1SA95BapsyNvTBDTuYpF7+v9WkR/kOOJeepiHvbhv2 R+byvKR34qoODzSj2oiKa/pywdTMVKPpOJm5YX9rL0MC48FS3P8b39G6qbiocccaDt3vYddcaAbXr k72q5Hrw==; Received: from localhost ([::1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.99.1 #2 (Red Hat Linux)) id 1xGcCa-0000000CuWn-2T3g; Tue, 13 Oct 2026 13:05:56 +0000 Received: from canpmsgout11.his.huawei.com ([113.46.200.226]) by bombadil.infradead.org with esmtps (Exim 4.99.1 #2 (Red Hat Linux)) id 1xGcCW-0000000CuVE-1zSV for linux-arm-kernel@lists.infradead.org; Tue, 13 Oct 2026 13:05:56 +0000 dkim-signature: v=1; a=rsa-sha256; d=huawei.com; s=dkim; c=relaxed/relaxed; q=dns/txt; h=From; bh=wYQuXQ0KfHa17CDRJUy3J57K/iJLMTM6lvkW2CcSDiQ=; b=6F7V5ju2QgWQ9eZjW3MED7pvYgSKl/itfkouUmXO5AnPvg4CViMZ+cJbrkHhH87RerZ3E2r8M GCZPwWzNbKZLEmW98TNci7+YUNiTmHaBGjPkmvgfhRB6SvQAAfJuoDmaTpgxKg9SY9c6ir2ICg/ saTm5ZL2eP+7OY3gxwfW1xg= Received: from mail.maildlp.com (unknown [172.19.163.200]) by canpmsgout11.his.huawei.com (SkyGuard) with ESMTPS id 4j3vQQ6Q24zKm4b; Tue, 13 Oct 2026 20:53:18 +0800 (CST) Received: from kwepemo100015.china.huawei.com (unknown [7.202.195.69]) by mail.maildlp.com (Postfix) with ESMTPS id 17A474055B; Tue, 13 Oct 2026 21:05:40 +0800 (CST) Received: from [10.67.111.244] (10.67.111.244) by kwepemo100015.china.huawei.com (7.202.195.69) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.2562.46; Tue, 13 Oct 2026 21:05:39 +0800 Message-ID: <1451a49c-f37a-486f-ac47-e2ff86fef28a@huawei.com> Date: Tue, 13 Oct 2026 21:05:37 +0800 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH RFC 0/3] security: ima: support TSM measurement registers To: Yeoreum Yun CC: Roberto Sassu , , , , Eric Snowberg , , , Dan Williams , Mimi Zohar , Roberto Sassu , Dmitry Kasatkin , Paul Moore , James Morris , "Serge E. Hallyn" , Catalin Marinas , Jason Gunthorpe , Suzuki Poulose , Steven Price , Sami Mujawar , Aneesh Kumar K.V , Jiri Pirko References: <20260930-ima_tgx_integration_v2-v1-0-722c35370548@arm.com> <9e74ff9d-e8a3-425e-bf7c-f973d06e6cdf@huawei.com> Content-Language: en-US From: GONG Ruiqi In-Reply-To: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 8bit X-Originating-IP: [10.67.111.244] X-ClientProxiedBy: kwepems500002.china.huawei.com (7.221.188.17) To kwepemo100015.china.huawei.com (7.202.195.69) X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.9.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20261013_060553_113926_38E66E71 X-CRM114-Status: GOOD ( 18.41 ) X-BeenThere: linux-arm-kernel@lists.infradead.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: "linux-arm-kernel" Errors-To: linux-arm-kernel-bounces+linux-arm-kernel=archiver.kernel.org@lists.infradead.org On 10/13/2026 4:41 PM, Yeoreum Yun wrote: >> On 10/1/2026 10:24 PM, Yeoreum Yun wrote: >>> Hi Roberto, >>> >>>> On Thu, 2026-10-01 at 13:27 +0200, Roberto Sassu wrote: >>>>> On Wed, 2026-09-30 at 14:43 +0100, Yeoreum Yun wrote: >>>>>> Confidential computing guests without a TPM can use TSM measurement >>>>>> registers to record IMA measurement digests instead of TPM PCRs. >>>> >>>> + Gong Ruiqi, of course. >>>> >>>> Roberto >> >> Hi Roberto, >> >> [...]Thank you for involving me! >> >>>> >>>>> Hi Yeoreum >>>>> >>>>> a similar patch set has been sent to the linux-integrity mailing list: >>>>> >>>>> https://lore.kernel.org/linux-integrity/20250630125928.765285-1-gongruiqi1@huawei.com/ >>>>> >>>>> Could you please work with Gong Ruiqi to have a unified proposal? >>>>> >>>>> Thanks >>>>> >>>>> Roberto >>>>> >>> >>> Thanks for letting me know and I think the proposal is almost the same >>> with the different terminology only. >>> >>> @Gong, what do you think? >> >> Hi Yeoreum, >> >> Nice to see this topic picked up again — I'm glad the IMA RoT framework >> series I posted last year is still of interest. >> >> Yes, I'd be happy to work with you on a unified proposal. It's been a >> while since I last worked on that series, so I'll first revisit my >> previous patch set, and then follow up with you to discuss the code details. >> >> Looking forward to working with you. >> >> BR, >> Ruiqi > > Hi Ruiqi :) > > Thanks for replying and I'm happy with you too. > However, I think we need to rework based on the Jiri's patch [0]. > > Any thought? Hi Yeoreum, I'd rather not base our work on Jiri's patch at this stage: it is a pre-RFC draft of the new attestation subsystem, whose design is itself still in progress. Building upon it instead of current mainline would be quite risky — we would be rebasing on a moving target, and merging would be blocked until the whole framework lands, which is realistically far off. I'd suggest we develop the proposal on current mainline, and switch to the new attestation subsystem once it lands. As I understand it, for us that is mostly just a matter of switching to a different set of APIs. BR, Ruiqi > > Link: [0] https://github.com/jpirko/linux_mlxsw/tree/wip_attestation_pre_rfc_draft1 > >