| 1 |
|
| 2 | #ifndef __TSM_H
|
| 3 | #define __TSM_H
|
| 4 |
|
| 5 | #include <linux/sizes.h>
|
| 6 | #include <linux/types.h>
|
| 7 |
|
| 8 | #define TSM_INBLOB_MAX 64
|
| 9 | #define TSM_OUTBLOB_MAX SZ_32K
|
| 10 |
|
| 11 | |
| 12 | * Privilege level is a nested permission concept to allow confidential
|
| 13 | * guests to partition address space, 4-levels are supported.
|
| 14 |
|
| 15 | #define TSM_PRIVLEVEL_MAX 3
|
| 16 |
|
| 17 | |
| 18 | * struct tsm_desc - option descriptor for generating tsm report blobs
|
| 19 | * @privlevel: optional privilege level to associate with @outblob
|
| 20 | * @inblob_len: sizeof @inblob
|
| 21 | * @inblob: arbitrary input data
|
| 22 |
|
| 23 | struct tsm_desc {
|
| 24 | unsigned int privlevel;
|
| 25 | size_t inblob_len;
|
| 26 | u8 inblob[TSM_INBLOB_MAX];
|
| 27 | };
|
| 28 |
|
| 29 | |
| 30 | * struct tsm_report - track state of report generation relative to options
|
| 31 | * @desc: input parameters to @report_new()
|
| 32 | * @outblob_len: sizeof(@outblob)
|
| 33 | * @outblob: generated evidence to provider to the attestation agent
|
| 34 | * @auxblob_len: sizeof(@auxblob)
|
| 35 | * @auxblob: (optional) auxiliary data to the report (e.g. certificate data)
|
| 36 |
|
| 37 | struct tsm_report {
|
| 38 | struct tsm_desc desc;
|
| 39 | size_t outblob_len;
|
| 40 | u8 *outblob;
|
| 41 | size_t auxblob_len;
|
| 42 | u8 *auxblob;
|
| 43 | };
|
| 44 |
|
| 45 | |
| 46 | * struct tsm_ops - attributes and operations for tsm instances
|
| 47 | * @name: tsm id reflected in /sys/kernel/config/tsm/report/$report/provider
|
| 48 | * @privlevel_floor: convey base privlevel for nested scenarios
|
| 49 | * @report_new: Populate @report with the report blob and auxblob
|
| 50 | * (optional), return 0 on successful population, or -errno otherwise
|
| 51 | *
|
| 52 | * Implementation specific ops, only one is expected to be registered at
|
| 53 | * a time i.e. only one of "sev-guest", "tdx-guest", etc.
|
| 54 |
|
| 55 | struct tsm_ops {
|
| 56 | const char *name;
|
| 57 | const unsigned int privlevel_floor;
|
| 58 | int (*report_new)(struct tsm_report *report, void *data);
|
| 59 | };
|
| 60 |
|
| 61 | extern const struct config_item_type tsm_report_default_type;
|
| 62 |
|
| 63 |
|
| 64 | extern const struct config_item_type tsm_report_extra_type;
|
| 65 |
|
| 66 | int tsm_register(const struct tsm_ops *ops, void *priv,
|
| 67 | const struct config_item_type *type);
|
| 68 | int tsm_unregister(const struct tsm_ops *ops);
|
| 69 | #endif
|