This replaces the TODO in test_sev() with a sanity check of the launch measurement returned by KVM_SEV_LAUNCH_MEASURE. A full attestation-style validation isn't possible from the selftest because userspace does not possess the transport keys the PSP uses to derive the measurement. The check therefore verifies the firmware-reported blob length and that the measurement and the nonce are non-zero, with the blob layout described by a struct so the buffer and field sizes derive from a single definition.
No functional changes from v1; this posting only adds a cover letter. v1: https://lore.kernel.org/all/[email protected]/ Hemanth Selam (1): KVM: selftests: SEV: Sanity check the launch measurement tools/testing/selftests/kvm/include/x86/sev.h | 12 +++++++ tools/testing/selftests/kvm/lib/x86/sev.c | 11 +++++-- .../selftests/kvm/x86/sev_smoke_test.c | 33 +++++++++++++++++-- 3 files changed, 52 insertions(+), 4 deletions(-) -- 2.43.7
