From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S933819AbdKAWIW (ORCPT ); Wed, 1 Nov 2017 18:08:22 -0400 Received: from mail-bn3nam01on0043.outbound.protection.outlook.com ([104.47.33.43]:12256 "EHLO NAM01-BN3-obe.outbound.protection.outlook.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S933309AbdKAVQ4 (ORCPT ); Wed, 1 Nov 2017 17:16:56 -0400 Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=brijesh.singh@amd.com; From: Brijesh Singh To: kvm@vger.kernel.org, linux-kernel@vger.kernel.org Cc: bp@alien8.de, Brijesh Singh , Paolo Bonzini , =?UTF-8?q?Radim=20Kr=C4=8Dm=C3=A1=C5=99?= , Borislav Petkov , Herbert Xu , Gary Hook , Tom Lendacky , linux-crypto@vger.kernel.org Subject: [Part2 PATCH v7 11/38] crypto: ccp: Define SEV key management command id Date: Wed, 1 Nov 2017 16:15:56 -0500 Message-Id: <20171101211623.71496-12-brijesh.singh@amd.com> X-Mailer: git-send-email 2.9.5 In-Reply-To: <20171101211623.71496-1-brijesh.singh@amd.com> References: <20171101211623.71496-1-brijesh.singh@amd.com> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Originating-IP: [165.204.78.1] X-ClientProxiedBy: DM5PR06CA0064.namprd06.prod.outlook.com (2603:10b6:3:37::26) To DM2PR12MB0155.namprd12.prod.outlook.com (2a01:111:e400:50ce::18) X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 4f25314a-6c1f-4b8d-10c0-08d5216dd9ff X-MS-Office365-Filtering-HT: Tenant X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:(22001)(48565401081)(4534020)(4602075)(2017052603199);SRVR:DM2PR12MB0155; X-Microsoft-Exchange-Diagnostics: 1;DM2PR12MB0155;3:75NjHtb78WYusz4F08Lr2rK51G6wzYyxUbCfqbamlORctGn7lmrpECjutfB3w4xaaF+HyRvblPr5TIWAJJoQnhes6GBAF4XsT0fj64NbeoumNY8lkUtMi6KCIjkoNNFbCEtCvy+KWRKlCA6eEkH8azXTcTXyhRkKwj313NNqie2U8UdU9iUDjLeD3NHqwukOwQZ8zjjp8jGwhWs5F2zxmuxY4mOTZCwLwq56fm3i81y0qcIFWCNu1zbbEZQZJfcy;25:R3d+ANXqOydkTovvL1JhPaD3HN2j5eVxVSPDxjOd8/1UiWV3nSLFy4iGh3yY+U9uWcg+C3GM8MnNZWPG/gimO+OROlpXeIJq8WXXGN6zatE5aFcwFRDEncZrLt2jlLjnTv3q7izsaQLaH2rPthkbp4RIUXFrXydJjBfOjw3NB62Ag2XRLPl8C7LZaC2bQ8Ok6jIXrksgrRJEP8gwAFxXQWn4CsfD2GcBbyFoYltyVi2NOjEdCqlskWXGU5rafbWX9v6/+5fmxELJE/jdW9buMpISYuRjVebjrHotOCYPClopQI7KUVu8RDpzhh4yvPQGiqIhwBullrszKQYVvXERNw==;31:Vlrn/4fzKO9sHw+I0zMiyMYELxeiqTU2W0WlpsvyDXOd3P1RfKGYvM+GlSLEUL3PbxOChg4DJwf4iLoEUee32kL6gN1/pzGb6HEiefAGcxGJAHV6pQX3n74drWyx8TypiWGp3mp+Jguo0DTda4HaglLqGk8N3oD5TONVvXIYVvNk732TLOiyRTmd20VxXV1ZFYrms5MSMecPlearEg8ACVPH7DKt42Sl5jDHKifr2f0= X-MS-TrafficTypeDiagnostic: DM2PR12MB0155: X-Microsoft-Exchange-Diagnostics: 1;DM2PR12MB0155;20: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;4:DCKySZMEGXPFRzM6OTIrFctFxeNXGaPC0PyBKfZVcuQFue7VUT7eqS5wH5yo+O+blY4bmMaAP4Jpxb78x4XATWCeOFpWQupIavrXorfXZ4EPASWCTEITqU+kdZQnDX3XmVgyp1WT2+5nP7kRBS5PfBuS1O3rbW06gz833tHIpcDnA57oKmT9EjRumbavekQE5+sCFKeuR37aAUgtyw77rsdi9a1evyUph7HX/yrAFVmL9ntpGJfNazDKTZsvlPHD42qPC43lo/BgDa3o2Owg/X4sVjIpZR68+fknYz9L+Txqp5Ue+XvjKgie5onITecqeqmWpXrSNGc54jfVjDj2mQ== X-Exchange-Antispam-Report-Test: UriScan:(9452136761055)(767451399110); X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(2401047)(8121501046)(5005006)(100000703101)(100105400095)(3231020)(10201501046)(93006095)(93001095)(3002001)(6055026)(6041248)(20161123560025)(20161123555025)(20161123564025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123562025)(20161123558100)(6072148)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095);SRVR:DM2PR12MB0155;BCL:0;PCL:0;RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095);SRVR:DM2PR12MB0155; X-Forefront-PRVS: 0478C23FE0 X-Forefront-Antispam-Report: SFV:NSPM;SFS:(10009020)(6009001)(39860400002)(376002)(346002)(189002)(199003)(1076002)(6116002)(97736004)(66066001)(50466002)(3846002)(25786009)(6306002)(4326008)(54906003)(966005)(316002)(8676002)(47776003)(36756003)(23676003)(50986999)(478600001)(81156014)(81166006)(105586002)(53416004)(53936002)(189998001)(106356001)(2906002)(16526018)(2870700001)(76176999)(33646002)(305945005)(1720100001)(7736002)(86362001)(5660300001)(6486002)(101416001)(50226002)(68736007)(8936002)(2950100002)(6666003)(2004002);DIR:OUT;SFP:1101;SCL:1;SRVR:DM2PR12MB0155;H:wsp141597wss.amd.com;FPR:;SPF:None;PTR:InfoNoRecords;MX:1;A:1;LANG:en; X-Microsoft-Exchange-Diagnostics: =?utf-8?B?MTtETTJQUjEyTUIwMTU1OzIzOkdVSkRXUkVBaUhkQnh4V1dINFVQRTFhMitr?= =?utf-8?B?QkpXNFJ2WXVFdzlPVTZJL2RUeGUyR3JVeHN4clFnNHNTcnhaendUdFBOMlRn?= =?utf-8?B?SXFhY3NNWFE1bkhaaVV2RkFWajVrM0cveksvUmFLT2xaTE9kWllmN1VqK21P?= =?utf-8?B?K1duVWhCMHhTLzNHQkoxMW5KQXFYalZQaEMrZ2ZqQXlTbnZFWVlqMkQxdFF6?= =?utf-8?B?QWNFWU5rTDE0TkxnMjQvSFhKT1RuZjB2aDJ2QWZqN0Fhc0w1L0dpcGcvN1lE?= =?utf-8?B?NFBxSVNGcng2eXNwS0xSTmFoclNhSnJmMjlmcTJuOUNTa1VicUUyelB5UTFa?= =?utf-8?B?LzRWQ05MMEpxSUNkaWR5aHZaK0ZFOGlhUGdzQkplS0NBZTdDKzRwTzJMcE1Z?= =?utf-8?B?Rm0vWHBUcDJZQnVMK25jb3RBYTIvNXIrS0hldHhuRzg5amhWN0cvRk8zR1Np?= =?utf-8?B?TnM1WGdEUG1CcEpXcHM5WldOaVF2TXJuT0kyN2lwVTBWMVF0dlArd1BFcDhC?= =?utf-8?B?cDhJQURyVVlaYlowWUkwN2czQkx2TVBMYXc2bENPc290YS9XbERXbHlZSVda?= =?utf-8?B?aE5UVHhwUGozRTFDRjNQYllEUU9jUXRmV0ZHQWRMbFJFV1NJT244Z09NdzI4?= =?utf-8?B?US9meFg4dWJ3dFhIYzNpNnRnZlBmTTdsSlpwdGZiY3BYTWNjZks3TDN2QVJk?= =?utf-8?B?dUFCcmZkR0d5Y3FVcXdLN0MvcDMwbmltN0xhMmUzeHJwMEhaWlZnRFJVOVZn?= =?utf-8?B?NWxOY0VSUUM2bEVwc2hjcCsyWFA2T1k1eUFRQWhrNGxGUjJMWUVCWlNUZlVa?= =?utf-8?B?em1MM3lkSTJvMWp2T1graHNsZHZCSTZvaGZkbG9Xa2xzZjJLZTVEcnQxRzZa?= =?utf-8?B?dUVLQ1lzd29NUmMvUUJNWWFLdjNUK1d6VGRUR09jVjVQeFRrQXJkeTFLSENw?= =?utf-8?B?L0NvR1MyckQ5eE4zL3ZXWEFkNDFCTUpPVWR3ekk1WkwzSXNWOS8rNDdKYnlw?= =?utf-8?B?WHZDWmh5UVlqSytZaUpGNThjWlFTUXA3RHJ4ZnlIMGpnRXhjMUVaNXNhTCsx?= =?utf-8?B?YnJFSkxkc1VKbXRaU0pCZG0xVGZjNTA0SHI5dXEraUFONmc3c0JXNWMvbzFS?= =?utf-8?B?dFVadW5MdHBXdlJPeGd3c1l4KzVyLzhyeWNwaFZSWkNoZnZXTzdJWXpQK1hT?= =?utf-8?B?cWxMWnBJMmhMRHdBdDZxbVFnK2Z4M1U2aVlVcm9qODlCRGhFamNVQVdHc3NX?= =?utf-8?B?VXBoS042UWxubDhLMGpHRkFlSCtUUmJ6V2lPUHkzakpkVWhJdmhyaW41eDBU?= =?utf-8?B?UUpaV1hrV3dJemQxR1dUMm8rVWJJY3FxUGZBT2NqZm1CNnZLd0hCbG9BNHl6?= =?utf-8?B?RXYzRENLTS9vZ0NKK05PTTdhNXZ2OGN5SkI4OC92MEJKa3dXbVpyd2pHQ09m?= =?utf-8?B?UHhLN3RDUFkzOVVDZVBocWNJbExvdFgwcVRiazI3akxnZUthdXJGYUprVnRE?= =?utf-8?Q?w0XIZLAzS1pjgktLUbc1BOoMB1S/sZ8bh9tJIk4Lhan3+l?= X-Microsoft-Exchange-Diagnostics: 1;DM2PR12MB0155;6:jQyn9prwK1DMl3IIrB72HZWM2pJfgZO5HmYl7TuYDzfh2gBf4C2BEWR/bLyZLMErX0MwVejhwMO1AAD+Uu60Pq5lUpdkGQd6Fjz4Hgvx3HVmmxbyCDP1S9zc6/yfGj3LGMQjm0rnQzEJ6qw4SH5qlp9A76w6rjQAp5c8PYU5q1glTTdOVPk7gzxgErUFWmznp1tSJwLxe6rsJMDHb89FwFKisk3ZPqLT8LPON6xhPKJU47Iyx/qP1xr3A9Uocve+kQ0hDSKY2qisEk1WmppXMqQx7STyuoRsr8u2LYVB5QuBuWaGcB2p5qsjqze3v0DR0ty6zB4ZLRFbkMdl8+sKqVa3WeaTV+27R8MRcBQCeng=;5:oHZ12Y669qzBGiYwSKfboU2QUxQRmoycL8vXS/MfX3M0vNBNCAzORuhcGQvTQvZPkLQedDjmg15fJYYmI22rNwvRdO5aI1/FjlLoHzOKcp+i37hReQLalWO6NYBw5NmAt66wb+696ZUySq9OPMsfa+iqYMbmVbc9X8Cc4BGlbYI=;24:n+eBCONoFDHyxb1RHixmWsuRu9IN+A+Rq/09WN/JlmM7CqdC5kEXx2bRa0Erpg/jLBmOoZR8WgaG38Kb8zpTg976SLIcndlEQr++4drPWyQ=;7:NtrnDNbrdWw4rtsQCLbJfFYfNkCIgIeQAQsw84qivrrrRN014I27oWnEgRts1cetzQGzeX6v9IKvseuoKeXqL+vj4IuwQGMRLr15lFmGWzl6ZCXGKFZ22x/0a0tv9RPzI5JQ/yZjcoFBuaCdunUVl+YwKbolZqerwMbQ2qA87KrAGnkFLd4z/IYQjbsHtzlmFcAyoNHqQ0obPw/oQbg5ULla8+eZuWv8QMrdaPt5WPhwJjrUbCFy8oCtY3XW6/Jh SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-Microsoft-Exchange-Diagnostics: 1;DM2PR12MB0155;20:0j+1omJ8pFoc5mAFLXhkM3l2BsM+XZh6x4bABSZIQVpTddYOLkSBmOMJLQybo6Wx/ZQE/yNY9xfPFn7DrSoz9Xr7hK9T7rO3gccbNTzPWTY1sOEwNCa5l9G7sS6ycM49Q5qdkNFnKaheScbx0ZxlMNAQ/44w65y7Og60U74saWrvpwDBJ/YeZbyIcRaTKDhMLVBusBlh4FqyOReWulSsJf/meqZEICfuQzSUHfIyDl09Eyj5GpMHjOqkCFXFfbQY X-OriginatorOrg: amd.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 01 Nov 2017 21:16:43.1879 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 4f25314a-6c1f-4b8d-10c0-08d5216dd9ff X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 3dd8961f-e488-4e60-8e11-a82d994e183d X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM2PR12MB0155 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Define Secure Encrypted Virtualization (SEV) key management command id and structure. The command definition is available in SEV KM spec 0.14 (http://support.amd.com/TechDocs/55766_SEV-KM API_Specification.pdf) Cc: Paolo Bonzini Cc: "Radim Krčmář" Cc: Borislav Petkov Cc: Herbert Xu Cc: Gary Hook Cc: Tom Lendacky Cc: linux-crypto@vger.kernel.org Cc: kvm@vger.kernel.org Cc: linux-kernel@vger.kernel.org Improvements-by: Borislav Petkov Signed-off-by: Brijesh Singh Reviewed-by: Borislav Petkov Acked-by: Gary R Hook --- include/linux/psp-sev.h | 494 ++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 494 insertions(+) create mode 100644 include/linux/psp-sev.h diff --git a/include/linux/psp-sev.h b/include/linux/psp-sev.h new file mode 100644 index 000000000000..15bda519538e --- /dev/null +++ b/include/linux/psp-sev.h @@ -0,0 +1,494 @@ +/* + * AMD Secure Encrypted Virtualization (SEV) driver interface + * + * Copyright (C) 2016-2017 Advanced Micro Devices, Inc. + * + * Author: Brijesh Singh + * + * SEV spec 0.14 is available at: + * http://support.amd.com/TechDocs/55766_SEV-KM API_Specification.pdf + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License version 2 as + * published by the Free Software Foundation. + */ + +#ifndef __PSP_SEV_H__ +#define __PSP_SEV_H__ + +#include + +#ifdef CONFIG_X86 +#include + +#define __psp_pa(x) __sme_pa(x) +#else +#define __psp_pa(x) __pa(x) +#endif + +#define SEV_FW_BLOB_MAX_SIZE 0x4000 /* 16KB */ + +/** + * SEV platform state + */ +enum sev_state { + SEV_STATE_UNINIT = 0x0, + SEV_STATE_INIT = 0x1, + SEV_STATE_WORKING = 0x2, + + SEV_STATE_MAX +}; + +/** + * SEV platform and guest management commands + */ +enum sev_cmd { + /* platform commands */ + SEV_CMD_INIT = 0x001, + SEV_CMD_SHUTDOWN = 0x002, + SEV_CMD_FACTORY_RESET = 0x003, + SEV_CMD_PLATFORM_STATUS = 0x004, + SEV_CMD_PEK_GEN = 0x005, + SEV_CMD_PEK_CSR = 0x006, + SEV_CMD_PEK_CERT_IMPORT = 0x007, + SEV_CMD_PDH_CERT_EXPORT = 0x008, + SEV_CMD_PDH_GEN = 0x009, + SEV_CMD_DF_FLUSH = 0x00A, + + /* Guest commands */ + SEV_CMD_DECOMMISSION = 0x020, + SEV_CMD_ACTIVATE = 0x021, + SEV_CMD_DEACTIVATE = 0x022, + SEV_CMD_GUEST_STATUS = 0x023, + + /* Guest launch commands */ + SEV_CMD_LAUNCH_START = 0x030, + SEV_CMD_LAUNCH_UPDATE_DATA = 0x031, + SEV_CMD_LAUNCH_UPDATE_VMSA = 0x032, + SEV_CMD_LAUNCH_MEASURE = 0x033, + SEV_CMD_LAUNCH_UPDATE_SECRET = 0x034, + SEV_CMD_LAUNCH_FINISH = 0x035, + + /* Guest migration commands (outgoing) */ + SEV_CMD_SEND_START = 0x040, + SEV_CMD_SEND_UPDATE_DATA = 0x041, + SEV_CMD_SEND_UPDATE_VMSA = 0x042, + SEV_CMD_SEND_FINISH = 0x043, + + /* Guest migration commands (incoming) */ + SEV_CMD_RECEIVE_START = 0x050, + SEV_CMD_RECEIVE_UPDATE_DATA = 0x051, + SEV_CMD_RECEIVE_UPDATE_VMSA = 0x052, + SEV_CMD_RECEIVE_FINISH = 0x053, + + /* Guest debug commands */ + SEV_CMD_DBG_DECRYPT = 0x060, + SEV_CMD_DBG_ENCRYPT = 0x061, + + SEV_CMD_MAX, +}; + +/** + * status code returned by the commands + */ +enum psp_ret_code { + SEV_RET_SUCCESS = 0, + SEV_RET_INVALID_PLATFORM_STATE, + SEV_RET_INVALID_GUEST_STATE, + SEV_RET_INAVLID_CONFIG, + SEV_RET_INVALID_len, + SEV_RET_ALREADY_OWNED, + SEV_RET_INVALID_CERTIFICATE, + SEV_RET_POLICY_FAILURE, + SEV_RET_INACTIVE, + SEV_RET_INVALID_ADDRESS, + SEV_RET_BAD_SIGNATURE, + SEV_RET_BAD_MEASUREMENT, + SEV_RET_ASID_OWNED, + SEV_RET_INVALID_ASID, + SEV_RET_WBINVD_REQUIRED, + SEV_RET_DFFLUSH_REQUIRED, + SEV_RET_INVALID_GUEST, + SEV_RET_INVALID_COMMAND, + SEV_RET_ACTIVE, + SEV_RET_HWSEV_RET_PLATFORM, + SEV_RET_HWSEV_RET_UNSAFE, + SEV_RET_UNSUPPORTED, + SEV_RET_MAX, +}; + +/** + * struct sev_data_init - INIT command parameters + * + * @flags: processing flags + * @tmr_address: system physical address used for SEV-ES + * @tmr_len: len of tmr_address + */ +struct sev_data_init { + u32 flags; /* In */ + u32 reserved; /* In */ + u64 tmr_address; /* In */ + u32 tmr_len; /* In */ +} __packed; + +/** + * struct sev_data_pek_csr - PEK_CSR command parameters + * + * @address: PEK certificate chain + * @len: len of certificate + */ +struct sev_data_pek_csr { + u64 address; /* In */ + u32 len; /* In/Out */ +} __packed; + +/** + * struct sev_data_cert_import - PEK_CERT_IMPORT command parameters + * + * @pek_address: PEK certificate chain + * @pek_len: len of PEK certificate + * @oca_address: OCA certificate chain + * @oca_len: len of OCA certificate + */ +struct sev_data_pek_cert_import { + u64 pek_cert_address; /* In */ + u32 pek_cert_len; /* In */ + u32 reserved; /* In */ + u64 oca_cert_address; /* In */ + u32 oca_cert_len; /* In */ +} __packed; + +/** + * struct sev_data_pdh_cert_export - PDH_CERT_EXPORT command parameters + * + * @pdh_address: PDH certificate address + * @pdh_len: len of PDH certificate + * @cert_chain_address: PDH certificate chain + * @cert_chain_len: len of PDH certificate chain + */ +struct sev_data_pdh_cert_export { + u64 pdh_cert_address; /* In */ + u32 pdh_cert_len; /* In/Out */ + u32 reserved; /* In */ + u64 cert_chain_address; /* In */ + u32 cert_chain_len; /* In/Out */ +} __packed; + +/** + * struct sev_data_decommission - DECOMMISSION command parameters + * + * @handle: handle of the VM to decommission + */ +struct sev_data_decommission { + u32 handle; /* In */ +} __packed; + +/** + * struct sev_data_activate - ACTIVATE command parameters + * + * @handle: handle of the VM to activate + * @asid: asid assigned to the VM + */ +struct sev_data_activate { + u32 handle; /* In */ + u32 asid; /* In */ +} __packed; + +/** + * struct sev_data_deactivate - DEACTIVATE command parameters + * + * @handle: handle of the VM to deactivate + */ +struct sev_data_deactivate { + u32 handle; /* In */ +} __packed; + +/** + * struct sev_data_guest_status - SEV GUEST_STATUS command parameters + * + * @handle: handle of the VM to retrieve status + * @policy: policy information for the VM + * @asid: current ASID of the VM + * @state: current state of the VM + */ +struct sev_data_guest_status { + u32 handle; /* In */ + u32 policy; /* Out */ + u32 asid; /* Out */ + u8 state; /* Out */ +} __packed; + +/** + * struct sev_data_launch_start - LAUNCH_START command parameters + * + * @handle: handle assigned to the VM + * @policy: guest launch policy + * @dh_cert_address: physical address of DH certificate blob + * @dh_cert_len: len of DH certificate blob + * @session_address: physical address of session parameters + * @session_len: len of session parameters + */ +struct sev_data_launch_start { + u32 handle; /* In/Out */ + u32 policy; /* In */ + u64 dh_cert_address; /* In */ + u32 dh_cert_len; /* In */ + u32 reserved; /* In */ + u64 session_address; /* In */ + u32 session_len; /* In */ +} __packed; + +/** + * struct sev_data_launch_update_data - LAUNCH_UPDATE_DATA command parameter + * + * @handle: handle of the VM to update + * @len: len of memory to be encrypted + * @address: physical address of memory region to encrypt + */ +struct sev_data_launch_update_data { + u32 handle; /* In */ + u32 reserved; + u64 address; /* In */ + u32 len; /* In */ +} __packed; + +/** + * struct sev_data_launch_update_vmsa - LAUNCH_UPDATE_VMSA command + * + * @handle: handle of the VM + * @address: physical address of memory region to encrypt + * @len: len of memory region to encrypt + */ +struct sev_data_launch_update_vmsa { + u32 handle; /* In */ + u32 reserved; + u64 address; /* In */ + u32 len; /* In */ +} __packed; + +/** + * struct sev_data_launch_measure - LAUNCH_MEASURE command parameters + * + * @handle: handle of the VM to process + * @address: physical address containing the measurement blob + * @len: len of measurement blob + */ +struct sev_data_launch_measure { + u32 handle; /* In */ + u32 reserved; + u64 address; /* In */ + u32 len; /* In/Out */ +} __packed; + +/** + * struct sev_data_launch_secret - LAUNCH_SECRET command parameters + * + * @handle: handle of the VM to process + * @hdr_address: physical address containing the packet header + * @hdr_len: len of packet header + * @guest_address: system physical address of guest memory region + * @guest_len: len of guest_paddr + * @trans_address: physical address of transport memory buffer + * @trans_len: len of transport memory buffer + */ +struct sev_data_launch_secret { + u32 handle; /* In */ + u32 reserved1; + u64 hdr_address; /* In */ + u32 hdr_len; /* In */ + u32 reserved2; + u64 guest_address; /* In */ + u32 guest_len; /* In */ + u32 reserved3; + u64 trans_address; /* In */ + u32 trans_len; /* In */ +} __packed; + +/** + * struct sev_data_launch_finish - LAUNCH_FINISH command parameters + * + * @handle: handle of the VM to process + */ +struct sev_data_launch_finish { + u32 handle; /* In */ +} __packed; + +/** + * struct sev_data_send_start - SEND_START command parameters + * + * @handle: handle of the VM to process + * @policy: policy information for the VM + * @pdh_cert_address: physical address containing PDH certificate + * @pdh_cert_len: len of PDH certificate + * @plat_certs_address: physical address containing platform certificate + * @plat_certs_len: len of platform certificate + * @amd_certs_address: physical address containing AMD certificate + * @amd_certs_len: len of AMD certificate + * @session_address: physical address containing Session data + * @session_len: len of session data + */ +struct sev_data_send_start { + u32 handle; /* In */ + u32 policy; /* Out */ + u64 pdh_cert_address; /* In */ + u32 pdh_cert_len; /* In */ + u32 reserved1; + u64 plat_cert_address; /* In */ + u32 plat_cert_len; /* In */ + u32 reserved2; + u64 amd_cert_address; /* In */ + u32 amd_cert_len; /* In */ + u32 reserved3; + u64 session_address; /* In */ + u32 session_len; /* In/Out */ +} __packed; + +/** + * struct sev_data_send_update - SEND_UPDATE_DATA command + * + * @handle: handle of the VM to process + * @hdr_address: physical address containing packet header + * @hdr_len: len of packet header + * @guest_address: physical address of guest memory region to send + * @guest_len: len of guest memory region to send + * @trans_address: physical address of host memory region + * @trans_len: len of host memory region + */ +struct sev_data_send_update_data { + u32 handle; /* In */ + u32 reserved1; + u64 hdr_address; /* In */ + u32 hdr_len; /* In/Out */ + u32 reserved2; + u64 guest_address; /* In */ + u32 guest_len; /* In */ + u32 reserved3; + u64 trans_address; /* In */ + u32 trans_len; /* In */ +} __packed; + +/** + * struct sev_data_send_update - SEND_UPDATE_VMSA command + * + * @handle: handle of the VM to process + * @hdr_address: physical address containing packet header + * @hdr_len: len of packet header + * @guest_address: physical address of guest memory region to send + * @guest_len: len of guest memory region to send + * @trans_address: physical address of host memory region + * @trans_len: len of host memory region + */ +struct sev_data_send_update_vmsa { + u32 handle; /* In */ + u64 hdr_address; /* In */ + u32 hdr_len; /* In/Out */ + u32 reserved2; + u64 guest_address; /* In */ + u32 guest_len; /* In */ + u32 reserved3; + u64 trans_address; /* In */ + u32 trans_len; /* In */ +} __packed; + +/** + * struct sev_data_send_finish - SEND_FINISH command parameters + * + * @handle: handle of the VM to process + */ +struct sev_data_send_finish { + u32 handle; /* In */ +} __packed; + +/** + * struct sev_data_receive_start - RECEIVE_START command parameters + * + * @handle: handle of the VM to perform receive operation + * @pdh_cert_address: system physical address containing PDH certificate blob + * @pdh_cert_len: len of PDH certificate blob + * @session_address: system physical address containing session blob + * @session_len: len of session blob + */ +struct sev_data_receive_start { + u32 handle; /* In/Out */ + u32 policy; /* In */ + u64 pdh_cert_address; /* In */ + u32 pdh_cert_len; /* In */ + u32 reserved1; + u64 session_address; /* In */ + u32 session_len; /* In */ +} __packed; + +/** + * struct sev_data_receive_update_data - RECEIVE_UPDATE_DATA command parameters + * + * @handle: handle of the VM to update + * @hdr_address: physical address containing packet header blob + * @hdr_len: len of packet header + * @guest_address: system physical address of guest memory region + * @guest_len: len of guest memory region + * @trans_address: system physical address of transport buffer + * @trans_len: len of transport buffer + */ +struct sev_data_receive_update_data { + u32 handle; /* In */ + u32 reserved1; + u64 hdr_address; /* In */ + u32 hdr_len; /* In */ + u32 reserved2; + u64 guest_address; /* In */ + u32 guest_len; /* In */ + u32 reserved3; + u64 trans_address; /* In */ + u32 trans_len; /* In */ +} __packed; + +/** + * struct sev_data_receive_update_vmsa - RECEIVE_UPDATE_VMSA command parameters + * + * @handle: handle of the VM to update + * @hdr_address: physical address containing packet header blob + * @hdr_len: len of packet header + * @guest_address: system physical address of guest memory region + * @guest_len: len of guest memory region + * @trans_address: system physical address of transport buffer + * @trans_len: len of transport buffer + */ +struct sev_data_receive_update_vmsa { + u32 handle; /* In */ + u32 reserved1; + u64 hdr_address; /* In */ + u32 hdr_len; /* In */ + u32 reserved2; + u64 guest_address; /* In */ + u32 guest_len; /* In */ + u32 reserved3; + u64 trans_address; /* In */ + u32 trans_len; /* In */ +} __packed; + +/** + * struct sev_data_receive_finish - RECEIVE_FINISH command parameters + * + * @handle: handle of the VM to finish + */ +struct sev_data_receive_finish { + u32 handle; /* In */ +} __packed; + +/** + * struct sev_data_dbg - DBG_ENCRYPT/DBG_DECRYPT command parameters + * + * @handle: handle of the VM to perform debug operation + * @src_addr: source address of data to operate on + * @dst_addr: destination address of data to operate on + * @len: len of data to operate on + */ +struct sev_data_dbg { + u32 handle; /* In */ + u32 reserved; + u64 src_addr; /* In */ + u64 dst_addr; /* In */ + u32 len; /* In */ +} __packed; + +#endif /* __PSP_SEV_H__ */ -- 2.9.5