Commit | Line | Data |
---|---|---|
70e6f7e2 DW |
1 | /* SPDX-License-Identifier: GPL-2.0 */ |
2 | #ifndef __TSM_H | |
3 | #define __TSM_H | |
4 | ||
5 | #include <linux/sizes.h> | |
6 | #include <linux/types.h> | |
7 | ||
8 | #define TSM_INBLOB_MAX 64 | |
9 | #define TSM_OUTBLOB_MAX SZ_32K | |
10 | ||
11 | /* | |
12 | * Privilege level is a nested permission concept to allow confidential | |
13 | * guests to partition address space, 4-levels are supported. | |
14 | */ | |
15 | #define TSM_PRIVLEVEL_MAX 3 | |
16 | ||
17 | /** | |
18 | * struct tsm_desc - option descriptor for generating tsm report blobs | |
19 | * @privlevel: optional privilege level to associate with @outblob | |
20 | * @inblob_len: sizeof @inblob | |
21 | * @inblob: arbitrary input data | |
22 | */ | |
23 | struct tsm_desc { | |
24 | unsigned int privlevel; | |
25 | size_t inblob_len; | |
26 | u8 inblob[TSM_INBLOB_MAX]; | |
27 | }; | |
28 | ||
29 | /** | |
30 | * struct tsm_report - track state of report generation relative to options | |
31 | * @desc: input parameters to @report_new() | |
32 | * @outblob_len: sizeof(@outblob) | |
33 | * @outblob: generated evidence to provider to the attestation agent | |
34 | * @auxblob_len: sizeof(@auxblob) | |
35 | * @auxblob: (optional) auxiliary data to the report (e.g. certificate data) | |
36 | */ | |
37 | struct tsm_report { | |
38 | struct tsm_desc desc; | |
39 | size_t outblob_len; | |
40 | u8 *outblob; | |
41 | size_t auxblob_len; | |
42 | u8 *auxblob; | |
43 | }; | |
44 | ||
45 | /** | |
46 | * struct tsm_ops - attributes and operations for tsm instances | |
47 | * @name: tsm id reflected in /sys/kernel/config/tsm/report/$report/provider | |
48 | * @privlevel_floor: convey base privlevel for nested scenarios | |
49 | * @report_new: Populate @report with the report blob and auxblob | |
50 | * (optional), return 0 on successful population, or -errno otherwise | |
51 | * | |
52 | * Implementation specific ops, only one is expected to be registered at | |
53 | * a time i.e. only one of "sev-guest", "tdx-guest", etc. | |
54 | */ | |
55 | struct tsm_ops { | |
56 | const char *name; | |
57 | const unsigned int privlevel_floor; | |
58 | int (*report_new)(struct tsm_report *report, void *data); | |
59 | }; | |
60 | ||
61 | extern const struct config_item_type tsm_report_default_type; | |
62 | ||
63 | /* publish @privlevel, @privlevel_floor, and @auxblob attributes */ | |
64 | extern const struct config_item_type tsm_report_extra_type; | |
65 | ||
66 | int tsm_register(const struct tsm_ops *ops, void *priv, | |
67 | const struct config_item_type *type); | |
68 | int tsm_unregister(const struct tsm_ops *ops); | |
69 | #endif /* __TSM_H */ |