From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.remote-ip=217.140.110.172 ARC-Seal: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; cv=none; t=1792563288; b=LE9tIWyCLnWeWd4IOB0VNNfCcfnB8BOpc9Bovq3KHJnwFJa3w5sfG73+5w9leTLgGQgM mH+vnsHKwCe4TW/lSfWSEekSGzvE7rjcT2e90Fmoxr8evN8ckO9tCboukhMslu95SruyQ 55HAy9lfByhUf9ftrb24+HIPfiTNv7/RnhiHCmlFAbhNzvvbKdEea/702T03YEDqErPal pggYllND0oIzPolQ1IwOKnBOuJ4DHx1sjRe8xabrMhbdz+z6nzTJFDG4S9vft00dNmwGd RZ/t02ZYPgq4pxkd4y9iHRZ0Mt0EdPCWdqNRncFTk1foEMgjTHJtA10z5Goz9t8W7iA== ARC-Message-Signature: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; c=relaxed/relaxed; t=1792563288; h=DMARC-Filter:Received:Received:DKIM-Signature:Date:From:To:Cc: Subject:Message-ID:References:MIME-Version:Content-Type: Content-Disposition:In-Reply-To; bh=3x3TamlaaK9V9PCuBZqg1dttpYbp4NHVNda75j19VEs=; b=2EfzwPCVgBJbenG5UjSPTXtM7BeNXjTOiDr5tTyLo+VzRTzhs/hUNOX/wpPAb3QhR0IR dbamqTfTjrL4umUpZBj38lnFrQt06yNhF9nnKgSaoCK0YSTqYZPoC2hBVCaQ9zaOzQW8h DaxQknZ7BLQ03uS6Hs1PWExOUKZqABmACHhlmvK1A5HZqlJjC9JGmPvRiJPz/xC1eI8Ig Ysyihlf7SY8kx4coOC/TMBlyxB8rjs5ip0Qdlz/07A8IVEP44TPOM/uV7cs1sQpjJVuNH 8wCZk3z+HbiUA24isuo4hw2w0fyK1MLiSr/VC7zt9nicZEmIgOb/6b5Xxrz3yAfR3AQ== ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass header.from=arm.com; spf=pass smtp.mailfrom=arm.com; dkim=pass header.d=arm.com header.i=@arm.com header.a=rsa-sha256 header.s=foss header.b=Dz1W2m1m; arc=none smtp.remote-ip=217.140.110.172 Received: from foss.arm.com (foss.arm.com [217.140.110.172]) by smtp.subspace.kernel.org (Postfix) with ESMTP id 39F35606A32D; Wed, 21 Oct 2026 06:14:42 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.4.2 smtp.subspace.kernel.org 39F35606A32D Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=arm.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=arm.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key, unprotected) header.d=arm.com header.i=@arm.com header.a=rsa-sha256 header.s=foss header.b=Dz1W2m1m Received: from usa-sjc-imap-foss1.foss.arm.com (unknown [10.121.207.14]) by usa-sjc-mx-foss1.foss.arm.com (Postfix) with ESMTP id DF9A815A1; Tue, 20 Oct 2026 23:14:37 -0700 (PDT) Received: from e129823.arm.com (e129823.arm.com [10.2.213.3]) by usa-sjc-imap-foss1.foss.arm.com (Postfix) with ESMTPSA id 7D69D3F673; Tue, 20 Oct 2026 23:14:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=arm.com; s=foss; t=1792563281; bh=bY7eaKmWXeEGJZPv0klJ3mm9fvB9sa6YQ58K0dGT+DQ=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=Dz1W2m1mtqieAvvcHZ0PElJP5ck781BRAil8keCt0J0xDmnmsvOtE2z2M/5OD8bJT x0mY2JIMQy/68/SPz8OHAETC2GSRyy6i0mXuMcfrF0pwBi7AW/wwQj2YV7ClSyJ7P8 z7NHuQtFqmTF4JQhakFU6b9pfZaA/t3mKW3YduKY= Date: Wed, 21 Oct 2026 07:14:33 +0100 From: Yeoreum Yun To: Jason Gunthorpe Cc: Yeoreum Yun , Alexandre Ghiti , Albert Ou , Ard Biesheuvel , Arnd Bergmann , Catalin Marinas , Jonathan Corbet , David Sterba , Ilias Apalodimas , linux-arch@vger.kernel.org, linux-arm-kernel@lists.infradead.org, linux-doc@vger.kernel.org, linux-efi@vger.kernel.org, linux-riscv@lists.infradead.org, Mark Rutland , Palmer Dabbelt , Paul Walmsley , Randy Dunlap , Simon Glass , Shuah Khan , Nick Terrell , Will Deacon , Alexandre Ghiti , Conor Dooley , Jonathan Cameron , linux-integrity@vger.kernel.org, Palmer Dabbelt , patches@lists.linux.dev, Piotr =?iso-8859-1?Q?Kr=F3l?= , Ross Philipson , Sami Tolvanen , Song Shuai Subject: Re: [PATCH v2 15/15] efi/arm64: Implement ARM64 DRTM in the stub Message-ID: References: <0-v2-989a18390eb1+486-arm64_drtm_jgg@nvidia.com> <15-v2-989a18390eb1+486-arm64_drtm_jgg@nvidia.com> <20261020233435.GJ3008132@nvidia.com> X-Mailing-List: linux-integrity@vger.kernel.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20261020233435.GJ3008132@nvidia.com> On Tue, Oct 20, 2026 at 08:34:35PM -0300, Jason Gunthorpe wrote: > On Wed, Oct 21, 2026 at 12:24:40AM +0100, Yeoreum Yun wrote: > > One small question... > > > > [..snipped..] > > > > > +void efi_drtm_launch(void) > > > +{ > > > + if (efi_drtm_policy == EFI_DRTM_OFF) > > > + return; > > > + > > > + /* > > > + * No cache maintenance is required before the launch. v1.4B R42130 in > > > + * Table 22 "DCE preamble requirements" requires the DRTM_PARAMETERS to > > > + * be accessible as Normal Write-Back Cacheable, Inner Shareable memory, > > > + * so the DCE reads them coherently with the writes made above. R45220 > > > + * in Table 30 "DCE requirements for the DLME" then has the DCE clean > > > + * and invalidate the whole DLME region to the Point of Coherency before > > > + * it measures the DLME image, which covers both the Image itself and > > > + * the handoff struct placed in the DLME region. Thus once we jump into > > > + * the kernel with MMU and caches off the CPU will see everything the > > > + * stub wrote. > > > + */ > > > + arm_drtm_dynamic_launch(drtm_cfg.params_addr); > > > > After launching, How to get eventlogs for measurement of DLEM if > > tpm_read_log_efi() is used? Doesn't it need to concatenate those > > event logs from DRTM eventlog in returned DLEM data? > > My plan is a future series will return them as a discrete log bundle > through attestation subsystem. All of the logs will be available > consistently that way, CCGL, the EFI and ACPI ones.. > > And it will be logically linked to the ROT the DRTM uses in some > future ROT agile DRTM flow. So we can tell the difference between a > TPM bare metal launch into PCRs and something like a realm launch into > REMs. Make sense. Thanks! -- Sincerely, Yeoreum Yun