sev: add sev-inject-launch-secret
authorTobin Feldman-Fitzthum <tobin@ibm.com>
Tue, 27 Oct 2020 17:03:03 +0000 (13:03 -0400)
committerEduardo Habkost <ehabkost@redhat.com>
Thu, 10 Dec 2020 22:33:17 +0000 (17:33 -0500)
commitc7f7e6970d3b74c1454cafea4918187e06c473eb
tree305f51bc016b3aec4654352ada698a427677f846
parent1bf8b88f144bee747e386c88d45d772e066bbb36
sev: add sev-inject-launch-secret

AMD SEV allows a guest owner to inject a secret blob
into the memory of a virtual machine. The secret is
encrypted with the SEV Transport Encryption Key and
integrity is guaranteed with the Transport Integrity
Key. Although QEMU facilitates the injection of the
launch secret, it cannot access the secret.

Signed-off-by: Tobin Feldman-Fitzthum <tobin@linux.ibm.com>
Signed-off-by: Eduardo Habkost <ehabkost@redhat.com>
Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
Reviewed-by: Brijesh Singh <brijesh.singh@amd.com>
Message-Id: <20201027170303.47550-1-tobin@linux.ibm.com>
Signed-off-by: Eduardo Habkost <ehabkost@redhat.com>
include/monitor/monitor.h
include/sysemu/sev.h
monitor/misc.c
qapi/misc-target.json
target/i386/monitor.c
target/i386/sev-stub.c
target/i386/sev.c
target/i386/trace-events