]> git.proxmox.com Git - mirror_qemu.git/commit - target/i386/sev.c
sev/i386: add support to LAUNCH_MEASURE command
authorBrijesh Singh <brijesh.singh@amd.com>
Thu, 8 Mar 2018 12:48:51 +0000 (06:48 -0600)
committerPaolo Bonzini <pbonzini@redhat.com>
Tue, 13 Mar 2018 16:36:05 +0000 (17:36 +0100)
commitc6c89c976dd654a943603396f1ea58b7a0eb3101
tree4b608e09b27349bf0953336d8c02c8f818f276b8
parent952e0668c4facc80765dd3c412c8a5a084188e6c
sev/i386: add support to LAUNCH_MEASURE command

During machine creation we encrypted the guest bios image, the
LAUNCH_MEASURE command can be used to retrieve the measurement of
the encrypted memory region. This measurement is a signature of
the memory contents that can be sent to the guest owner as an
attestation that the memory was encrypted correctly by the firmware.
VM management tools like libvirt can query the measurement using
query-sev-launch-measure QMP command.

Cc: Paolo Bonzini <pbonzini@redhat.com>
Cc: Richard Henderson <rth@twiddle.net>
Cc: Eduardo Habkost <ehabkost@redhat.com>
Signed-off-by: Brijesh Singh <brijesh.singh@amd.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
target/i386/sev-stub.c
target/i386/sev.c
target/i386/sev_i386.h
target/i386/trace-events