Re: [PATCH v2] target/i386/sev: add support to query the attestation report

2021-01-10 Thread Dov Murik
Hello Brijesh, On 05/01/2021 18:39, Brijesh Singh wrote: The SEV FW >= 0.23 added a new command that can be used to query the attestation report containing the SHA-256 digest of the guest memory and VMSA encrypted with the LAUNCH_UPDATE and sign it with the PEK. Note, we already have a command

Re: [PATCH v2] target/i386/sev: add support to query the attestation report

2021-01-05 Thread James Bottomley
On Tue, 2021-01-05 at 10:39 -0600, Brijesh Singh wrote: > The SEV FW >= 0.23 added a new command that can be used to query the > attestation report containing the SHA-256 digest of the guest memory > and VMSA encrypted with the LAUNCH_UPDATE and sign it with the PEK. > > Note, we already have a co

[PATCH v2] target/i386/sev: add support to query the attestation report

2021-01-05 Thread Brijesh Singh
The SEV FW >= 0.23 added a new command that can be used to query the attestation report containing the SHA-256 digest of the guest memory and VMSA encrypted with the LAUNCH_UPDATE and sign it with the PEK. Note, we already have a command (LAUNCH_MEASURE) that can be used to query the SHA-256 diges