Re: [libvirt PATCH 02/12] tools: support validating SEV firmware boot measurements

2022-10-20 Thread Cole Robinson
On 10/20/22 8:11 AM, Cole Robinson wrote: > On 10/18/22 5:15 AM, Daniel P. Berrangé wrote: >> On Sun, Oct 16, 2022 at 02:54:47PM -0400, Cole Robinson wrote: >>> On 10/7/22 7:42 AM, Daniel P. Berrangé wrote: The virt-qemu-sev-validate program will compare a reported SEV/SEV-ES domain

Re: [libvirt PATCH 02/12] tools: support validating SEV firmware boot measurements

2022-10-20 Thread Cole Robinson
On 10/18/22 5:15 AM, Daniel P. Berrangé wrote: > On Sun, Oct 16, 2022 at 02:54:47PM -0400, Cole Robinson wrote: >> On 10/7/22 7:42 AM, Daniel P. Berrangé wrote: >>> The virt-qemu-sev-validate program will compare a reported SEV/SEV-ES >>> domain launch measurement, to a computed launch

Re: [libvirt PATCH 02/12] tools: support validating SEV firmware boot measurements

2022-10-18 Thread Daniel P . Berrangé
On Sun, Oct 16, 2022 at 02:54:47PM -0400, Cole Robinson wrote: > On 10/7/22 7:42 AM, Daniel P. Berrangé wrote: > > The virt-qemu-sev-validate program will compare a reported SEV/SEV-ES > > domain launch measurement, to a computed launch measurement. This > > determines whether the domain has been

Re: [libvirt PATCH 02/12] tools: support validating SEV firmware boot measurements

2022-10-16 Thread Cole Robinson
On 10/7/22 7:42 AM, Daniel P. Berrangé wrote: > The virt-qemu-sev-validate program will compare a reported SEV/SEV-ES > domain launch measurement, to a computed launch measurement. This > determines whether the domain has been tampered with during launch. > > This initial implementation requires

[libvirt PATCH 02/12] tools: support validating SEV firmware boot measurements

2022-10-07 Thread Daniel P . Berrangé
The virt-qemu-sev-validate program will compare a reported SEV/SEV-ES domain launch measurement, to a computed launch measurement. This determines whether the domain has been tampered with during launch. This initial implementation requires all inputs to be provided explicitly, and as such can