Re: [PATCH v2] SEV: QMP support for Inject-Launch-Secret

2020-07-03 Thread tobin
On 2020-07-03 09:25, Brijesh Singh wrote: On 7/3/20 6:11 AM, Dr. David Alan Gilbert wrote: * Tobin Feldman-Fitzthum (to...@linux.vnet.ibm.com) wrote: From: Tobin Feldman-Fitzthum AMD SEV allows a guest owner to inject a secret blob into the memory of a virtual machine. The secret is encrypted

Re: [PATCH v2] SEV: QMP support for Inject-Launch-Secret

2020-07-03 Thread James Bottomley
On Fri, 2020-07-03 at 17:02 +0100, Dr. David Alan Gilbert wrote: > * James Bottomley (j...@linux.ibm.com) wrote: > > On Fri, 2020-07-03 at 12:11 +0100, Dr. David Alan Gilbert wrote: > > > * Tobin Feldman-Fitzthum (to...@linux.vnet.ibm.com) wrote: > > > > [...] > > > > +input.trans_uaddr = (uin

Re: [PATCH v2] SEV: QMP support for Inject-Launch-Secret

2020-07-03 Thread Dr. David Alan Gilbert
* James Bottomley (j...@linux.ibm.com) wrote: > On Fri, 2020-07-03 at 12:11 +0100, Dr. David Alan Gilbert wrote: > > * Tobin Feldman-Fitzthum (to...@linux.vnet.ibm.com) wrote: > [...] > > > +input.trans_uaddr = (uint64_t)data; > > > +input.trans_len = data_sz; > > > + > > > +input.guest

Re: [PATCH v2] SEV: QMP support for Inject-Launch-Secret

2020-07-03 Thread James Bottomley
On Fri, 2020-07-03 at 12:11 +0100, Dr. David Alan Gilbert wrote: > * Tobin Feldman-Fitzthum (to...@linux.vnet.ibm.com) wrote: [...] > > +input.trans_uaddr = (uint64_t)data; > > +input.trans_len = data_sz; > > + > > +input.guest_uaddr = (uint64_t)hva; > > Thanks for changing these; alth

Re: [PATCH v2] SEV: QMP support for Inject-Launch-Secret

2020-07-03 Thread Brijesh Singh
On 7/3/20 6:11 AM, Dr. David Alan Gilbert wrote: > * Tobin Feldman-Fitzthum (to...@linux.vnet.ibm.com) wrote: >> From: Tobin Feldman-Fitzthum >> >> AMD SEV allows a guest owner to inject a secret blob >> into the memory of a virtual machine. The secret is >> encrypted with the SEV Transport Encr

Re: [PATCH v2] SEV: QMP support for Inject-Launch-Secret

2020-07-03 Thread Dr. David Alan Gilbert
* Tobin Feldman-Fitzthum (to...@linux.vnet.ibm.com) wrote: > From: Tobin Feldman-Fitzthum > > AMD SEV allows a guest owner to inject a secret blob > into the memory of a virtual machine. The secret is > encrypted with the SEV Transport Encryption Key and > integrity is guaranteed with the Transpo

[PATCH v2] SEV: QMP support for Inject-Launch-Secret

2020-07-02 Thread Tobin Feldman-Fitzthum
From: Tobin Feldman-Fitzthum AMD SEV allows a guest owner to inject a secret blob into the memory of a virtual machine. The secret is encrypted with the SEV Transport Encryption Key and integrity is guaranteed with the Transport Integrity Key. Although QEMU faciliates the injection of the launch