From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: smtp.subspace.kernel.org; arc=pass header.oldest-pass=0 smtp.remote-ip=52.101.57.8 ARC-Seal: i=2; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; cv=pass; t=1792539281; b=l95ji97gqoa1m+fnOiXcEhU0Q+R0mUZnCcO69u2plbQ2ltmlnbLvk6FZDG/adj7VKAuV S/uXlAW+Cvm4OSlcThXQA2wI2Vh8cNeCK0Tn9rip6/B2DtxR6Yyomj9iHUe/GF53wKV6Y tN4dEyeJqX24dNH+LeqVDUxJoG92vmDmI6izKIEV2BJOLCywP4ZMplwqpqV5AITw/CzCg r7lxZnyJt1MhSyJ/jcvXll7hZq+xDr/dZ/8Xq2qJZsIXYaoXc+d8zD3T8cZVMCLz4wA3z djBtBF5oxg9pgt/BI2ceEC+MplNQCetGrDwiZlWih5kjQDuMK0MmNoadQoHVSNCQQlw== ARC-Message-Signature: i=2; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; c=relaxed/relaxed; t=1792539281; h=DMARC-Filter:DKIM-Signature:Received:Received:Date:From:To:Cc: Subject:Message-ID:References:Content-Type:Content-Disposition: In-Reply-To:X-ClientProxiedBy:MIME-Version:X-MS-PublicTrafficType: X-MS-TrafficTypeDiagnostic:X-MS-Office365-Filtering-Correlation-Id: X-MS-Exchange-SenderADCheck:X-MS-Exchange-AntiSpam-Relay: X-Microsoft-Antispam:X-Microsoft-Antispam-Message-Info: X-Forefront-Antispam-Report: X-MS-Exchange-AntiSpam-MessageData-ChunkCount: X-MS-Exchange-AntiSpam-MessageData-0:X-OriginatorOrg: X-MS-Exchange-CrossTenant-Network-Message-Id: X-MS-Exchange-CrossTenant-AuthSource:X-MS-Exchange-CrossTenant-AuthAs: X-MS-Exchange-CrossTenant-OriginalArrivalTime: X-MS-Exchange-CrossTenant-FromEntityHeader: X-MS-Exchange-CrossTenant-Id:X-MS-Exchange-CrossTenant-MailboxType: X-MS-Exchange-CrossTenant-UserPrincipalName: X-MS-Exchange-Transport-CrossTenantHeadersStamped; bh=8z2dg1KQTQ4M2NnyDLBkZr/PxB1IhVAqbjO0kPEIVww=; b=S1+ESEQu2mm6TMeafceB3fKV/92xCIFFwFdTOxcRUCCVURlxtSNsfw3Zib67ruwsO8Ct xCTAPNbMFWMlUpAiAPKW+tP2kQUyxqGfpacE8SNORHySPFrK7XPk3oUpvG3sCJjAZl87N PaRG0n2A8yMpmiLMYuUFSobc+Jmjl9gpzlgGfYMnVno3JbIHCodoIZbSUWa35+nJSXXFg elM4RJQlM4VKuNXAMvZTApW72YgkUFqKPJc4coOapCQEH42Wz6d+t81ZdWRoSTHVoX3EG eFIzlpRYmEi3iR/f3WuxIjIroBstVoUTFjOhvVHKwvdSctsA4+HYwjK5gSk70ShXebw== ARC-Authentication-Results: i=2; smtp.subspace.kernel.org; dmarc=pass header.from=nvidia.com; spf=fail smtp.mailfrom=nvidia.com; dkim=pass header.d=Nvidia.com header.i=@Nvidia.com header.a=rsa-sha256 header.s=selector2 header.b=q0LUPMzG; arc=pass header.oldest-pass=0 smtp.remote-ip=52.101.57.8 Received: from BN8PR05CU002.outbound.protection.outlook.com (mail-eastus2azon11011008.outbound.protection.outlook.com [52.101.57.8]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (secp384r1) server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id A6EA1606A319; Tue, 20 Oct 2026 23:34:40 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.4.2 smtp.subspace.kernel.org A6EA1606A319 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=nvidia.com Authentication-Results: smtp.subspace.kernel.org; spf=fail smtp.mailfrom=nvidia.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key, unprotected) header.d=Nvidia.com header.i=@Nvidia.com header.a=rsa-sha256 header.s=selector2 header.b=q0LUPMzG ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=noVjqAiKgn2CTm2WoBtx8cuNS0O+XsrOmrxvVCX6uJyh9lQ/pZIO+wpYnp3wbFC86ymhkNhnDmwgzSJ922iLJ9r2ZCMb4wSAPrDCpTjjOan7l9PSP8fXLFZZmQt5kutJW0t05jXN7MPQeXIUI7w9JI81tc7KtfzEPlW6JVPT+arKRRgk3t5TZjBX/nabpi9iZSjcD81lwlnCqllDjhyAhQsk4ioqfAVHsY9lwp20XjS7vWqmkng2BZypzV/7fls6lg/wXyEnMaOEURaFplQP3xUMFRVLPXINHtednRTToFmZ98r3lDdoilruYM4bJ8HStkv/GWiZj4En7AuZIy6WdQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=8z2dg1KQTQ4M2NnyDLBkZr/PxB1IhVAqbjO0kPEIVww=; b=npB10RpLCqYLKKo326sKtf6jLuaCeLKtbEpNK9ZjhNloaCRZf372vKHPN6NVL6rwGSMJLNIQC6nB9aQ0sYx4BO+VovHGopTDRU1um3c37ea1LATperuIe5h3d31UkiKgDFlPqmtKwSWXQv3m7Qo3YNPY9vlDaBfoUWPUjtCbt0kUA74MMauqB1OwZERA2KRJO5zYhDMP5tu7hwHvfIvZXrLhpamsNzuq1V89dRSrBZLGSlHa3E/TgI3FiSzfdHG5sxwPqJjmQ4nwWgKR7aUa37wna9n0BytDe3OGgO6VLDF9/+UUULk0Vh/KDvMlQn8Xqq9Et3Cl/cLhJZA/VSJa8w== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nvidia.com; dmarc=pass action=none header.from=nvidia.com; dkim=pass header.d=nvidia.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=Nvidia.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=8z2dg1KQTQ4M2NnyDLBkZr/PxB1IhVAqbjO0kPEIVww=; b=q0LUPMzG/nbWR+LktExCP3k7Lf34hT/aSvlCo1E+wjbFRECKVul/8QBSYBf67+eTzy9ZPGLa2AVMppPN9iec5cpnDzGgoB+qMyFj/4ogfsZwfkxFXHmBfcoFObO/ZyfrSh3c/Budo0k6vK8IJtTnRyOnidbayo7qV40B/sA3GYAq2tHdOnBgx8bLLTReS0slbas2rKoKimkmK5Xpu2wTicxS+6MeluQiI1ZcX4VYA6LUtD90BagvJmm0nfocyHvDKe+E13uK14bFW5D6hAxAOa44//FwkYv9+uUWPaK9zhpc2AVvTkGT2TEDDpB2c2MQOhCQNoIUm/XliTTIKB19vw== Authentication-Results: mx.microsoft.com 1; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=nvidia.com; Received: from CHBPR12MB731189.namprd12.prod.outlook.com (2603:10b6:610:33d::12) by LVUPR12MB999186.namprd12.prod.outlook.com (2603:10b6:408:3a3::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.546.15; Tue, 20 Oct 2026 23:34:36 +0000 Received: from CHBPR12MB731189.namprd12.prod.outlook.com ([fe80::b0e5:123d:fe06:e10d]) by CHBPR12MB731189.namprd12.prod.outlook.com ([fe80::b0e5:123d:fe06:e10d%6]) with mapi id 15.21.0546.012; Tue, 20 Oct 2026 23:34:36 +0000 Date: Tue, 20 Oct 2026 20:34:35 -0300 From: Jason Gunthorpe To: Yeoreum Yun Cc: Alexandre Ghiti , Albert Ou , Ard Biesheuvel , Arnd Bergmann , Catalin Marinas , Jonathan Corbet , David Sterba , Ilias Apalodimas , linux-arch@vger.kernel.org, linux-arm-kernel@lists.infradead.org, linux-doc@vger.kernel.org, linux-efi@vger.kernel.org, linux-riscv@lists.infradead.org, Mark Rutland , Palmer Dabbelt , Paul Walmsley , Randy Dunlap , Simon Glass , Shuah Khan , Nick Terrell , Will Deacon , Alexandre Ghiti , Conor Dooley , Jonathan Cameron , linux-integrity@vger.kernel.org, Palmer Dabbelt , patches@lists.linux.dev, Piotr =?utf-8?B?S3LDs2w=?= , Ross Philipson , Sami Tolvanen , Song Shuai Subject: Re: [PATCH v2 15/15] efi/arm64: Implement ARM64 DRTM in the stub Message-ID: <20261020233435.GJ3008132@nvidia.com> References: <0-v2-989a18390eb1+486-arm64_drtm_jgg@nvidia.com> <15-v2-989a18390eb1+486-arm64_drtm_jgg@nvidia.com> Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-ClientProxiedBy: YT3PR01CA0123.CANPRD01.PROD.OUTLOOK.COM (2603:10b6:b01:83::23) To CHBPR12MB731189.namprd12.prod.outlook.com (2603:10b6:610:33d::12) X-Mailing-List: linux-efi@vger.kernel.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: CHBPR12MB731189:EE_|LVUPR12MB999186:EE_ X-MS-Office365-Filtering-Correlation-Id: bd1a0665-569d-4ab7-5ba4-08df2f02b3e1 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|23010399003|1800799024|376014|7416014|366016|56012099006|4143699003|11063799006|10067099003|22082099003|18002099003|3023799007; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:CHBPR12MB731189.namprd12.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(23010399003)(1800799024)(376014)(7416014)(366016)(56012099006)(4143699003)(11063799006)(10067099003)(22082099003)(18002099003)(3023799007);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?IQrrDUtL3Ue0vDzTA3P57ph/uaHjPI2QqrbvubJUPBuUbtkbPakye2jE7xBL?= =?us-ascii?Q?F5aG7W/hkzeFvX+zEyLm+WlZYeE0HJg4Wslcj+LAyKH9AYV7Aukr1StI6W5X?= =?us-ascii?Q?xYmE56EvGuBGewt/mX7DmJAbvK4Vzb4LXlmbDtJ5lp5IDcalIJvoHmn1XvQl?= =?us-ascii?Q?JH0X0WUXviodqXuH36XUiEycy7FcTzqDkWkk22CJnU50VosehsYKXNVZ0kJ/?= =?us-ascii?Q?mecJO1z6JPdS91L7MLWvbzaLcQ1VKpp3JDk2iATSEx5UdOk17V4XBu5OL4bB?= =?us-ascii?Q?vRSumeXe0Sr9NmiojaQq0E97cGVEcH3JQQIQBWcZypJF/SLvWSVzWxRZZLfV?= =?us-ascii?Q?Cf/lzj44TLzNDNtUnnX/tRjpGaBvD45cjEbT09nvvFPJ58jZCe0f3N+mB/gB?= =?us-ascii?Q?6dBzfmSF+LExazQ8+M1fPQ7Oo3BHXzWKTlCstQK8WHU7HnOkDLWT4SJjfH6o?= =?us-ascii?Q?U7PtFxWxfnFB7i8yjqZyMJRXy/igN32srFrqcN1yJtb4CykvXl2SX5v4X2FZ?= =?us-ascii?Q?7lWyG+b1c7zcuyDdzRT1UFksyZvIE8STacsC+q33/7alNCj5Kd3/LHhQNozr?= =?us-ascii?Q?m/3S2ooES+M13UVujEW1aLtn6Pi3uP0F1zFkSXo17c7ZHe/4gQYMlbnaz9O7?= =?us-ascii?Q?at6+XdwCK/Sy4v8tmOnX5CiGJ+9YZvdRpXCnLDsC9NUGSzKSNTg9w9E3QuWr?= =?us-ascii?Q?+drq9YEWW9E7fcqxBoOkRg2vCkS3YkXjO1rJMoiF6vYFyvyQFTLRD8KuQzqa?= =?us-ascii?Q?r2mtM5lhnixdbSNSIiqg1OK7rqeyVHsz5MsK5NMUz/PhCL8uicIEsMdnuBK5?= =?us-ascii?Q?RdjKgFU3rqUrbqPHUZRhWd0bEXMNhYC3IvG4DMQg9zeIpfIsrAKCInOffgRY?= =?us-ascii?Q?rCO0/oS/NhBtNAI49En1artXCwURo54t0jkIUtMBg17eVGVfJ4JAML3ncADo?= =?us-ascii?Q?dguKddoVKz6foLWm5+WRu9lkKK6r6Nr9uUcdvCxe3l43S8beObsIa5bmcZeh?= =?us-ascii?Q?lj/7fRmVx/tB7I6+O1ufS5VOmAmZSrB/Wk0qpV9Viu8CEaY/CxKPUbXt2FiQ?= =?us-ascii?Q?8r7bdPJdvwsxs0jfqorqbGgOb+/ZRaSRLYE4Iw3qeRyTrRbOdKNurgjyxYk3?= =?us-ascii?Q?iYxrHcbKcDH+Gsvpsp+HAo4U0eYDzoojtMLzeHDIGoqIFh6yILEssqGJ8DyJ?= =?us-ascii?Q?9Pyr+Xm/nKPBUlyNZkgtpmZxR/QCRHNlluwajs8uMep2/xyK00of3SP0Yf0p?= =?us-ascii?Q?wkMAzAwj7HJ5Tx3ffFPT/RGQyxFr2A3FlHIYTsj2aTH7elyGXyADAz7roudk?= =?us-ascii?Q?2QzklPvJ7/vCaHoIHILzfVsxwuxy3yT2pqs5BXWwukfQwH1cF+n3zfaewiK9?= =?us-ascii?Q?GF6nbeIRCy/FNrnUHLvNHv/LFe8xsIfS0zAgTP5ETtt8+rj+EpTjWOMIOto2?= =?us-ascii?Q?6fczeiNVIhzdaEPxfgMvo9UCav3qLg7zsM3n8gizZMpqVT46/YsPbxvYnUEq?= =?us-ascii?Q?MbLEPYgrelQtUKY3XUErberwd9rkmVjjM/FA5iIn2SpgwsHCvj3MZVNEq0ij?= =?us-ascii?Q?qPSEOY0PNk1rWzV7cjZfNwFu+tT4gvgGTMvDlW5PsbMj5hXNo6YtqtP/mxUJ?= =?us-ascii?Q?7Elc5d6K5Fcuh73syyQQ+WyWb1lRxjMhZx7esx10N0Sx3nZ9Jd4LRFWsGwcP?= =?us-ascii?Q?JHxMCBa4wPQnLjhl4bm1Jt/CuEcST1HLUGoXHDexi9klwmsX?= X-OriginatorOrg: Nvidia.com X-MS-Exchange-CrossTenant-Network-Message-Id: bd1a0665-569d-4ab7-5ba4-08df2f02b3e1 X-MS-Exchange-CrossTenant-AuthSource: CHBPR12MB731189.namprd12.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Oct 2026 23:34:36.4923 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 43083d15-7273-40c1-b7db-39efd9ccc17a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: D0hmr18fQZ2jt7bFaTam2ApRILgae7WkPF1thbCzKp6nwQoE2I4urOWLNMlMMWBD X-MS-Exchange-Transport-CrossTenantHeadersStamped: LVUPR12MB999186 On Wed, Oct 21, 2026 at 12:24:40AM +0100, Yeoreum Yun wrote: > One small question... > > [..snipped..] > > > +void efi_drtm_launch(void) > > +{ > > + if (efi_drtm_policy == EFI_DRTM_OFF) > > + return; > > + > > + /* > > + * No cache maintenance is required before the launch. v1.4B R42130 in > > + * Table 22 "DCE preamble requirements" requires the DRTM_PARAMETERS to > > + * be accessible as Normal Write-Back Cacheable, Inner Shareable memory, > > + * so the DCE reads them coherently with the writes made above. R45220 > > + * in Table 30 "DCE requirements for the DLME" then has the DCE clean > > + * and invalidate the whole DLME region to the Point of Coherency before > > + * it measures the DLME image, which covers both the Image itself and > > + * the handoff struct placed in the DLME region. Thus once we jump into > > + * the kernel with MMU and caches off the CPU will see everything the > > + * stub wrote. > > + */ > > + arm_drtm_dynamic_launch(drtm_cfg.params_addr); > > After launching, How to get eventlogs for measurement of DLEM if > tpm_read_log_efi() is used? Doesn't it need to concatenate those > event logs from DRTM eventlog in returned DLEM data? My plan is a future series will return them as a discrete log bundle through attestation subsystem. All of the logs will be available consistently that way, CCGL, the EFI and ACPI ones.. And it will be logically linked to the ROT the DRTM uses in some future ROT agile DRTM flow. So we can tell the difference between a TPM bare metal launch into PCRs and something like a realm launch into REMs. Thanks, Jason