Re: [Qemu-devel] [PATCH V2] hw/misc: Add simple measurement hardware

2016-08-09 Thread Stefan Berger
Matthew Garrett wrote on 08/08/2016 03:43:57 PM: > > On Fri, Aug 5, 2016 at 8:56 PM, Stefan Berger wrote: > > Matthew Garrett wrote on 08/05/2016 07:17:12 PM: > >> This version of the implementation depends on port io, but if there's >

Re: [Qemu-devel] [PATCH V2] hw/misc: Add simple measurement hardware

2016-08-08 Thread Matthew Garrett
On Fri, Aug 5, 2016 at 8:56 PM, Stefan Berger wrote: > Matthew Garrett wrote on 08/05/2016 07:17:12 PM: >> This version of the implementation depends on port io, but if there's >> interest I'll add mmio as well. > > Port io is x86 specific, right? I don't

Re: [Qemu-devel] [PATCH V2] hw/misc: Add simple measurement hardware

2016-08-05 Thread Stefan Berger
Matthew Garrett wrote on 08/05/2016 07:17:12 PM: > > Trusted Boot is based around having a trusted store of measurement data and > a secure communications channel between that store and an attestation > target. In actual hardware, that's a TPM. Since the TPM can only be

Re: [Qemu-devel] [PATCH V2] hw/misc: Add simple measurement hardware

2016-08-05 Thread Eric Blake
On 08/05/2016 05:17 PM, Matthew Garrett wrote: Generally, we recommend that v2 patches be sent as their own top-level thread, rather than in-reply-to v1, because several tooling scripts get confused and don't look for deep patches. > Trusted Boot is based around having a trusted store of

[Qemu-devel] [PATCH V2] hw/misc: Add simple measurement hardware

2016-08-05 Thread Matthew Garrett
Trusted Boot is based around having a trusted store of measurement data and a secure communications channel between that store and an attestation target. In actual hardware, that's a TPM. Since the TPM can only be accessed via the host system, this in turn requires that the TPM be able to perform