diff options
Diffstat (limited to 'meta-amd-bsp/recipes-kernel/linux/linux-yocto-4.14.71-e3000/0040-crypto-ccp-Add-GET_ID-SEV-command.patch')
| -rw-r--r-- | meta-amd-bsp/recipes-kernel/linux/linux-yocto-4.14.71-e3000/0040-crypto-ccp-Add-GET_ID-SEV-command.patch | 153 |
1 files changed, 153 insertions, 0 deletions
diff --git a/meta-amd-bsp/recipes-kernel/linux/linux-yocto-4.14.71-e3000/0040-crypto-ccp-Add-GET_ID-SEV-command.patch b/meta-amd-bsp/recipes-kernel/linux/linux-yocto-4.14.71-e3000/0040-crypto-ccp-Add-GET_ID-SEV-command.patch new file mode 100644 index 00000000..a0193e93 --- /dev/null +++ b/meta-amd-bsp/recipes-kernel/linux/linux-yocto-4.14.71-e3000/0040-crypto-ccp-Add-GET_ID-SEV-command.patch @@ -0,0 +1,153 @@ +From ff15b826aa4c78ec7069916e1b4f2b803c7427ac Mon Sep 17 00:00:00 2001 +From: Janakarajan Natarajan <Janakarajan.Natarajan@amd.com> +Date: Fri, 25 May 2018 15:23:30 -0500 +Subject: [PATCH 40/95] crypto: ccp - Add GET_ID SEV command + +The GET_ID command, added as of SEV API v0.16, allows the SEV firmware +to be queried about a unique CPU ID. This unique ID can then be used +to obtain the public certificate containing the Chip Endorsement Key +(CEK) public key signed by the AMD SEV Signing Key (ASK). + +For more information please refer to "Section 5.12 GET_ID" of +https://support.amd.com/TechDocs/55766_SEV-KM%20API_Specification.pdf + +Signed-off-by: Janakarajan Natarajan <Janakarajan.Natarajan@amd.com> +Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> +Signed-off-by: Sudheesh Mavila <sudheesh.mavila@amd.com> +--- + drivers/crypto/ccp/psp-dev.c | 44 ++++++++++++++++++++++++++++++++++++++++++++ + include/linux/psp-sev.h | 11 +++++++++++ + include/uapi/linux/psp-sev.h | 12 ++++++++++++ + 3 files changed, 67 insertions(+) + +diff --git a/drivers/crypto/ccp/psp-dev.c b/drivers/crypto/ccp/psp-dev.c +index 12838b4..ff478d8 100644 +--- a/drivers/crypto/ccp/psp-dev.c ++++ b/drivers/crypto/ccp/psp-dev.c +@@ -119,6 +119,7 @@ static int sev_cmd_buffer_len(int cmd) + case SEV_CMD_RECEIVE_UPDATE_VMSA: return sizeof(struct sev_data_receive_update_vmsa); + case SEV_CMD_LAUNCH_UPDATE_SECRET: return sizeof(struct sev_data_launch_secret); + case SEV_CMD_DOWNLOAD_FIRMWARE: return sizeof(struct sev_data_download_firmware); ++ case SEV_CMD_GET_ID: return sizeof(struct sev_data_get_id); + default: return 0; + } + +@@ -510,6 +511,46 @@ static int sev_ioctl_do_pek_import(struct sev_issue_cmd *argp) + return ret; + } + ++static int sev_ioctl_do_get_id(struct sev_issue_cmd *argp) ++{ ++ struct sev_data_get_id *data; ++ u64 data_size, user_size; ++ void *id_blob, *mem; ++ int ret; ++ ++ /* SEV GET_ID available from SEV API v0.16 and up */ ++ if (!SEV_VERSION_GREATER_OR_EQUAL(0, 16)) ++ return -ENOTSUPP; ++ ++ /* SEV FW expects the buffer it fills with the ID to be ++ * 8-byte aligned. Memory allocated should be enough to ++ * hold data structure + alignment padding + memory ++ * where SEV FW writes the ID. ++ */ ++ data_size = ALIGN(sizeof(struct sev_data_get_id), 8); ++ user_size = sizeof(struct sev_user_data_get_id); ++ ++ mem = kzalloc(data_size + user_size, GFP_KERNEL); ++ if (!mem) ++ return -ENOMEM; ++ ++ data = mem; ++ id_blob = mem + data_size; ++ ++ data->address = __psp_pa(id_blob); ++ data->len = user_size; ++ ++ ret = __sev_do_cmd_locked(SEV_CMD_GET_ID, data, &argp->error); ++ if (!ret) { ++ if (copy_to_user((void __user *)argp->data, id_blob, data->len)) ++ ret = -EFAULT; ++ } ++ ++ kfree(mem); ++ ++ return ret; ++} ++ + static int sev_ioctl_do_pdh_export(struct sev_issue_cmd *argp) + { + struct sev_user_data_pdh_cert_export input; +@@ -647,6 +688,9 @@ static long sev_ioctl(struct file *file, unsigned int ioctl, unsigned long arg) + case SEV_PDH_CERT_EXPORT: + ret = sev_ioctl_do_pdh_export(&input); + break; ++ case SEV_GET_ID: ++ ret = sev_ioctl_do_get_id(&input); ++ break; + default: + ret = -EINVAL; + goto out; +diff --git a/include/linux/psp-sev.h b/include/linux/psp-sev.h +index 1d24962..827c601 100644 +--- a/include/linux/psp-sev.h ++++ b/include/linux/psp-sev.h +@@ -55,6 +55,7 @@ enum sev_cmd { + SEV_CMD_PDH_GEN = 0x009, + SEV_CMD_DF_FLUSH = 0x00A, + SEV_CMD_DOWNLOAD_FIRMWARE = 0x00B, ++ SEV_CMD_GET_ID = 0x00C, + + /* Guest commands */ + SEV_CMD_DECOMMISSION = 0x020, +@@ -142,6 +143,16 @@ struct sev_data_download_firmware { + } __packed; + + /** ++ * struct sev_data_get_id - GET_ID command parameters ++ * ++ * @address: physical address of region to place unique CPU ID(s) ++ * @len: len of the region ++ */ ++struct sev_data_get_id { ++ u64 address; /* In */ ++ u32 len; /* In/Out */ ++} __packed; ++/** + * struct sev_data_pdh_cert_export - PDH_CERT_EXPORT command parameters + * + * @pdh_address: PDH certificate address +diff --git a/include/uapi/linux/psp-sev.h b/include/uapi/linux/psp-sev.h +index 3d77fe9..86c7e0a 100644 +--- a/include/uapi/linux/psp-sev.h ++++ b/include/uapi/linux/psp-sev.h +@@ -30,6 +30,7 @@ enum { + SEV_PDH_GEN, + SEV_PDH_CERT_EXPORT, + SEV_PEK_CERT_IMPORT, ++ SEV_GET_ID, + + SEV_MAX, + }; +@@ -124,6 +125,17 @@ struct sev_user_data_pdh_cert_export { + } __packed; + + /** ++ * struct sev_user_data_get_id - GET_ID command parameters ++ * ++ * @socket1: Buffer to pass unique ID of first socket ++ * @socket2: Buffer to pass unique ID of second socket ++ */ ++struct sev_user_data_get_id { ++ __u8 socket1[64]; /* Out */ ++ __u8 socket2[64]; /* Out */ ++} __packed; ++ ++/** + * struct sev_issue_cmd - SEV ioctl parameters + * + * @cmd: SEV commands to execute +-- +2.7.4 + |