Re: [PATCH v2] KVM/SVM: add support for SEV attestation command

2021-01-25 Thread Paolo Bonzini
On 04/01/21 16:17, Brijesh Singh wrote: The SEV FW version >= 0.23 added a new command that can be used to query the attestation report containing the SHA-256 digest of the guest memory encrypted through the KVM_SEV_LAUNCH_UPDATE_{DATA, VMSA} commands and sign the report with the Platform

Re: [PATCH v2] KVM/SVM: add support for SEV attestation command

2021-01-22 Thread Brijesh Singh
Hi Paolo, Do you have any feedback on this ? It will be great if we can queue this for 5.11. -Brijesh On 1/4/21 9:17 AM, Brijesh Singh wrote: > The SEV FW version >= 0.23 added a new command that can be used to query > the attestation report containing the SHA-256 digest of the guest memory >

[PATCH v2] KVM/SVM: add support for SEV attestation command

2021-01-04 Thread Brijesh Singh
The SEV FW version >= 0.23 added a new command that can be used to query the attestation report containing the SHA-256 digest of the guest memory encrypted through the KVM_SEV_LAUNCH_UPDATE_{DATA, VMSA} commands and sign the report with the Platform Endorsement Key (PEK). See the SEV FW API spec