virt: sevguest: Add support to derive key
authorBrijesh Singh <brijesh.singh@amd.com>
Thu, 24 Feb 2022 16:56:23 +0000 (10:56 -0600)
committerBorislav Petkov <bp@suse.de>
Thu, 7 Apr 2022 14:47:12 +0000 (16:47 +0200)
commit68de0b2f938642079c0c853b219bdb88c4dc4d13
tree47b4e86cd61144bd5fcba09a040c7e958828a31c
parentfce96cf0443083e37455eff8f78fd240c621dae3
virt: sevguest: Add support to derive key

The SNP_GET_DERIVED_KEY ioctl interface can be used by the SNP guest to
ask the firmware to provide a key derived from a root key. The derived
key may be used by the guest for any purposes it chooses, such as a
sealing key or communicating with the external entities.

See SEV-SNP firmware spec for more information.

  [ bp: No need to memset "req" - it will get overwritten. ]

Signed-off-by: Brijesh Singh <brijesh.singh@amd.com>
Signed-off-by: Borislav Petkov <bp@suse.de>
Reviewed-by: Liam Merwick <liam.merwick@oracle.com>
Link: https://lore.kernel.org/r/20220307213356.2797205-45-brijesh.singh@amd.com
Documentation/virt/coco/sevguest.rst
drivers/virt/coco/sevguest/sevguest.c
include/uapi/linux/sev-guest.h