Skip to content

Commit

Permalink
crypto: ccp: Handle legacy SEV commands when SNP is enabled
Browse files Browse the repository at this point in the history
The behavior of legacy SEV commands is altered when the firmware is
initialized for SNP support. In that case, all command buffer memory
that may get written to by legacy SEV commands must be marked as
firmware-owned in the RMP table prior to issuing the command.

Additionally, when a command buffer contains a system physical address
that points to additional buffers that firmware may write to, special
handling is needed depending on whether:

  1) the system physical address points to guest memory
  2) the system physical address points to host memory

To handle case #1, the pages of these buffers are changed to
firmware-owned in the RMP table before issuing the command, and restored
to hypervisor-owned after the command completes.

For case #2, a bounce buffer is used instead of the original address.

Signed-off-by: Brijesh Singh <brijesh.singh@amd.com>
Co-developed-by: Michael Roth <michael.roth@amd.com>
Signed-off-by: Michael Roth <michael.roth@amd.com>
Signed-off-by: Ashish Kalra <ashish.kalra@amd.com>
Signed-off-by: Borislav Petkov (AMD) <bp@alien8.de>
Link: https://lore.kernel.org/r/20240126041126.1927228-19-michael.roth@amd.com
  • Loading branch information
Brijesh Singh authored and Borislav Petkov (AMD) committed Jan 29, 2024
1 parent 7364a6f commit a867ad6
Show file tree
Hide file tree
Showing 2 changed files with 416 additions and 10 deletions.
Loading

0 comments on commit a867ad6

Please sign in to comment.