[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Qemu-ppc] [PATCH for-4.2 v2 0/2] spapr: Implement H_TPM_COMM for access
From: |
Michael Roth |
Subject: |
[Qemu-ppc] [PATCH for-4.2 v2 0/2] spapr: Implement H_TPM_COMM for accessing host TPM device |
Date: |
Wed, 17 Jul 2019 15:58:40 -0500 |
These patches are based on ppc-for-4.2 and are also available at:
https://github.com/mdroth/qemu/commits/spapr-tpm-hcall-v2
This patchset implements the H_TPM_COMM hypercall, which provides a way
for an Ultravisor to pass raw TPM commands on to a host's TPM device,
either directly or through a TPM Resource Manager (needed to support
multiple guests).
Secure VMs running on an Ultravisor have a symmetric key that is
encrypted using a public key that is bound to a trusted host's TPM
hardware. This hypercall provides a means to decrypt the symmetric
key on behalf of a Secure VMs using the host's TPM hardware.
More details are provided in the spec summary introduced in patch 1.
Changes since v1:
- use separate hcall table for SVM hcall range (David)
- document reserved hcall range in ppc-spapr-uv-hcalls.txt
Changes since RFC/v0:
- configure TPM path via -device spapr-tpm-proxy instead of -machine (David)
- return H_FUNCTION (not H_RESOURCE) if TPM has not been configured (David)
- drop use of global for storing TPM FD (David)
- fix checkpatch errors relating to case statement indents, newlines in
error_report(), and lines over 80.
- fix some minor typos in documentation
- rebased on ppc-for-4.2
docs/specs/ppc-spapr-uv-hcalls.txt | 76 +++++++++++++++++++++++++++
hw/ppc/Makefile.objs | 1 +
hw/ppc/spapr.c | 33 +++++++++++-
hw/ppc/spapr_hcall.c | 13 +++++
hw/ppc/spapr_tpm_proxy.c | 176
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
hw/ppc/trace-events | 4 ++
include/hw/ppc/spapr.h | 11 ++++
include/hw/ppc/spapr_tpm_proxy.h | 31 +++++++++++
8 files changed, 344 insertions(+), 1 deletion(-)
- [Qemu-ppc] [PATCH for-4.2 v2 0/2] spapr: Implement H_TPM_COMM for accessing host TPM device,
Michael Roth <=