diff options
| author | Brijesh Singh <brijesh.singh@amd.com> | 2022-03-08 00:33:53 +0300 |
|---|---|---|
| committer | Borislav Petkov <bp@suse.de> | 2022-04-07 17:47:12 +0300 |
| commit | fce96cf0443083e37455eff8f78fd240c621dae3 (patch) | |
| tree | b4dda957908136bde79329681531228f617c324e /drivers/virt/coco/sevguest/Kconfig | |
| parent | 3a45b3753849c4a12cca2dd176c0192cd2a63e62 (diff) | |
| download | linux-fce96cf0443083e37455eff8f78fd240c621dae3.tar.xz | |
virt: Add SEV-SNP guest driver
The SEV-SNP specification provides the guest a mechanism to communicate
with the PSP without risk from a malicious hypervisor who wishes to
read, alter, drop or replay the messages sent. The driver uses
snp_issue_guest_request() to issue GHCB SNP_GUEST_REQUEST or
SNP_EXT_GUEST_REQUEST NAE events to submit the request to PSP.
The PSP requires that all communication should be encrypted using key
specified through a struct snp_guest_platform_data descriptor.
Userspace can use SNP_GET_REPORT ioctl() to query the guest attestation
report.
See SEV-SNP spec section Guest Messages for more details.
[ bp: Remove the "what" from the commit message, massage. ]
Signed-off-by: Brijesh Singh <brijesh.singh@amd.com>
Signed-off-by: Borislav Petkov <bp@suse.de>
Link: https://lore.kernel.org/r/20220307213356.2797205-44-brijesh.singh@amd.com
Diffstat (limited to 'drivers/virt/coco/sevguest/Kconfig')
| -rw-r--r-- | drivers/virt/coco/sevguest/Kconfig | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/drivers/virt/coco/sevguest/Kconfig b/drivers/virt/coco/sevguest/Kconfig new file mode 100644 index 000000000000..74ca1fe09437 --- /dev/null +++ b/drivers/virt/coco/sevguest/Kconfig @@ -0,0 +1,14 @@ +config SEV_GUEST + tristate "AMD SEV Guest driver" + default m + depends on AMD_MEM_ENCRYPT + select CRYPTO_AEAD2 + select CRYPTO_GCM + help + SEV-SNP firmware provides the guest a mechanism to communicate with + the PSP without risk from a malicious hypervisor who wishes to read, + alter, drop or replay the messages sent. The driver provides + userspace interface to communicate with the PSP to request the + attestation report and more. + + If you choose 'M' here, this module will be called sevguest. |