From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.remote-ip=209.85.160.174 ARC-Seal: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; cv=none; t=1794335257; b=2Ho3TcOOah4Mh7AP75EfGnXyWKgEpTnQZnOICrFXV7GL1Iji5mObPwEWkabcGBdjXPBC lUA96kEHtGF7RZ+AenGOBKWhE7y73oHZODEXSdc94XTwUJQY9mdOmNfokH9hrZZyGLv5P bQNjHRk5J7POQ7pigbAOtzVF9jM4dfkw7dpSBDSkSvzsX6eGUoqbd3dqcsaaSoLz8zwbQ M+9V/JUXBnmjOgLrYriCprM+KbDdpk27xxHYP45k94Aj0Hgf043e02IW/ISrl3YIGocqz 9XCd+tvfxntEGP/B+niOc1ZgJYLrpdyTGInSyWFfvO5Bc2bId7lK9ofBeQq3piz0dpA== ARC-Message-Signature: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; c=relaxed/relaxed; t=1794335257; h=DMARC-Filter:Received:DKIM-Signature:X-Google-DKIM-Signature: X-Forwarded-Encrypted:X-Gm-Message-State:X-Gm-Gg:X-Received:Received: Received:Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; bh=YXIy2qRY3m4JoNqfvZNIVm9KUne3fxI0qe7Yqqt3EGs=; b=B9FoqBXuX9kI+GmmYPsRwxYIyuQEMNeMF9QcAl3uWdp/uJEJ9LTsjv7+tve//gK6fokP N02ZM+NhCbXQg8vbR/BU168V+To5Fm2BHHlI5J4liGXVznUnI3qs+/GNHrQsEchG+FVPT R6Mpsnbnj3CQiIitoBCZPWyqwqp9kJ4lydg/xlOCqUCrPDPiNIXVqBg7ePhfbeILAVsco /8z5br3XMvLmAd2LtffNwddBu2DmWAXm6+uMOw+80Uen6pUiTpVPpVsEa6OojTAfyCVxo xLPV7SPC+EH+8smDR6NBvAbpZBJwSoa/qSloVSjyu5q/Z9j4bRhf6YpAbH0EsOKRGYw== ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=none header.from=ziepe.ca; spf=pass smtp.mailfrom=ziepe.ca; dkim=pass header.d=ziepe.ca header.i=@ziepe.ca header.a=rsa-sha256 header.s=google header.b=J7TMm8T3; arc=none smtp.remote-ip=209.85.160.174 Received: from mail-qt1-f174.google.com (mail-qt1-f174.google.com [209.85.160.174]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 30FBF606A323 for ; Tue, 10 Nov 2026 18:27:30 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.4.2 smtp.subspace.kernel.org 30FBF606A323 Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=ziepe.ca Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=ziepe.ca Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key, unprotected) header.d=ziepe.ca header.i=@ziepe.ca header.a=rsa-sha256 header.s=google header.b=J7TMm8T3 Received: by mail-qt1-f174.google.com with SMTP id d75a77b69052e-5364d86f7f0so25845061cf.1 for ; Tue, 10 Nov 2026 10:27:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ziepe.ca; s=google; t=1794335250; x=1794940050; darn=vger.kernel.org; h=in-reply-to:content-disposition:content-type:mime-version :references:message-id:subject:cc:to:from:date:from:to:cc:subject :date:message-id:reply-to:content-type; bh=YXIy2qRY3m4JoNqfvZNIVm9KUne3fxI0qe7Yqqt3EGs=; b=J7TMm8T34Tu4l5OHcANKwx0/ZOzfapRBnEg4cXPKDFAtzJrkdsQLmXQH1PNBaI+LZH HQxhcvnWaPMv4Mdu99jEJKX1gAfpkqK9bmVZNQr4gKf5Et/58JlVsH9oOxDsx7bqpFQu ZXW3WV+2lrudMoNdhU32xg9MgdSNO1NqIogSK+UVa/6AQgjRkJQkqGErKB9UAMu1XqgJ 3fZPTlqW+B98MNIeDrnpleLnnPacRQ56XVQM2pIc4xb54sJcW/ZDtQ/K4p7vR1GL4gM3 rK7V1sGMQaqI7HfANYUEMk0S5fY/S6x9xF1CTrUP9NqUwRARSKYQRXehKzOgiVLCp6ft i0vw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1794335250; x=1794940050; h=in-reply-to:content-disposition:content-type:mime-version :references:message-id:subject:cc:to:from:date:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=YXIy2qRY3m4JoNqfvZNIVm9KUne3fxI0qe7Yqqt3EGs=; b=HL6navSKLvd6WXTKoX8P4o3Bhtu6DYOuS/QjdVAN8OZ215Mq4UkzfS/LGL1fde0Knx H9EbKyUYvAQJ8Z7G/VOjJH0efKuhq4LRgIOetkhkrfmrDOz+1V09ZSmEZKfnt4fJDd/W RTMVgW0/kU56wuNRka9cmEyoq3W17eH/Gv1QDxKs11WPjji2ViMysdyMAwKMZDPyye4N kEsFr/OQP/dnQcfI6jP2cBxpQu1TZZgLvFg/4/iRvRdjpztJNicxhniLsXKIPE+Cu9+4 sIJGdsAvyCwHS95TrjLnGbogq743Q/EtDsUPR8I6QuydA+c3mZL6rcoL+ogrVzjVMSdj DMXw== X-Forwarded-Encrypted: i=1; AL+hErEqFlL+hI5IA/cUwXjU6k5FHWviVlbpEwyIYmyC+Sz4GTalW1KPbF45VXxD1e673+bOxdwNneyB94I=@vger.kernel.org X-Gm-Message-State: APuU4Z9pPwNZwlmgDOTnP5dsLbibRumE394vMp9fZHTPv0AeIHfNXHcJ hOhzUs3OVUfdJUAJrOzTQqlvjXBETVDz8+0TsFVupRb0gU9mFwVmCXRHNQx8B6uheP8= X-Gm-Gg: AYBFou3rF33VB4wH0FAqFeDppiRY84ETEkzkdzbxkJ8NnSXs4u6jnOIdcwwPkLzSoHp TbZBvG3nsZCDQIbETbyUJHlf6OCZ/WhZmQUb3V2qZtidSq6ZAyUY7iUbjcGslrm4TjJscDvBJc+ X4uufz7vANw+Mff3UHtTo4w7JeuGA7gez2q7mXU1XgtNh2ItfwVsJahHFcyHt3ECeyewkJLsyqU HvJC+/dKi1uqCL3G7O2SBUGyZUhcGazp1J8d+ka4BfsnKeuxPv5reMBjdtM7ytdPyrnNjMXLpc9 65YWWF1NpcvujHVJNftWz21XZ7DzaL/SmFJD7eQVsh+YrEqnsHUCGEYmKHhsBBvoxOi9w9zP6nv oM4flekOH3mVYPuN6eCqDPY5S7MiskJLG+CA/j5Up/uufjodZx24OYfsc2bBkFm6hhI7kzhSE6I SMp193WCYb9CkrbkVCcQHcLOXT6atiYKGTWhO0gHmG4/jAtjCvA6qWUXg2Fqm8tn5tp6najjMqh r5Upb/v2zKSFjHiaOwa+DVpCacfTGj+aEDEeoF+0tPxDSNtfPZ4QrQR9DFqYpNwottmpNCJ4OAe Oq9dhlwY0jLX4MeccOVnXi/Ho5/rPErLVq4qgdbu7UDgUF0u75IMGcOjrUGCkT3/6QHsbcGLh6a NMAPpIO3KSaE= X-Received: by 2002:a05:622a:313:b0:51c:1590:8e13 with SMTP id d75a77b69052e-555257c5f22mr54402921cf.4.1794335250028; Tue, 10 Nov 2026 10:27:30 -0800 (PST) Received: from ziepe.ca (hlfxns010zw-159-2-239-150.pppoe-dynamic.high-speed.ns.bellaliant.net. [159.2.239.150]) by smtp.gmail.com with ESMTPSA id d75a77b69052e-555093d9c3fsm30362981cf.3.2026.11.10.10.27.28 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 10 Nov 2026 10:27:28 -0800 (PST) Received: from jgg by wakko with local (Exim 4.97) (envelope-from ) id 1xQqZ5-00000006j4S-49JU; Tue, 10 Nov 2026 14:27:27 -0400 Date: Tue, 10 Nov 2026 14:27:27 -0400 From: Jason Gunthorpe To: Peter Fang Cc: "Edgecombe, Rick P" , "kvm@vger.kernel.org" , "linux-coco@lists.linux.dev" , "drdeeglaze@gmail.com" , "James.Bottomley@hansenpartnership.com" , "aik@amd.com" , "dave.hansen@linux.intel.com" , "Xing, Cedric" , "alistair.francis@wdc.com" , "linux-api@vger.kernel.org" , "Reshetova, Elena" , "kas@kernel.org" , "ankita@nvidia.com" , "jiri@resnulli.us" , "linux-kernel@vger.kernel.org" , "Jiang, Dave" , "Quigley, David" , "linux-doc@vger.kernel.org" , "x86@kernel.org" , "jpiotrowski@nvidia.com" , "suzuki.poulose@arm.com" , "lukas@wunner.de" , "Vivi, Rodrigo" , "jic23@kernel.org" , "ksinyuk@kernel.org" , "sameo@meta.com" , "sathyanarayanan.kuppuswamy@linux.intel.com" , "qinkun@google.com" , "pgonda@google.com" Subject: Re: [PATCH RFC 20/20] attestation: Add the TDX family implementation Message-ID: <20261110182727.GA663069@ziepe.ca> References: <20261023220030.GM3977851@ziepe.ca> <7843a833723e3aad40f8fc4de3a83f5a5059280f.camel@intel.com> <20261103005851.GH3889730@ziepe.ca> <20261109171236.GP663069@ziepe.ca> <20261109234252.GR663069@ziepe.ca> <4c75b369b68c98c5c35e296895b6935342dc7dc1.camel@intel.com> <20261110131114.GV663069@ziepe.ca> X-Mailing-List: linux-doc@vger.kernel.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: On Tue, Nov 10, 2026 at 10:16:07AM -0800, Peter Fang wrote: > > It is not local quote processing. This is labeling data properly so a > > verifier is possible without the user having to manually and directly > > inform the system what versions of Intel CPUs and TDX modules it > > should expect to have. > > With labeling like tdx-quote-sgx-1.0 and tdx-quote-eat-cwt-1.0, and > enough knowledge of these labels, I think this can be achieved. Yeah, that's all I'm asking for here, and it sounds like the magic bytes are enough for the kernel to deduce it and pass it to userspace. In future please transfer labels along with the blobs through out all your paths so we don't have to parse magic bytes to know what data we are holding. Jason