1 | /* SPDX-License-Identifier: GPL-2.0 */ |
2 | #ifndef __TSM_H |
3 | #define __TSM_H |
4 | |
5 | #include <linux/sizes.h> |
6 | #include <linux/types.h> |
7 | |
8 | #define TSM_INBLOB_MAX 64 |
9 | #define TSM_OUTBLOB_MAX SZ_32K |
10 | |
11 | /* |
12 | * Privilege level is a nested permission concept to allow confidential |
13 | * guests to partition address space, 4-levels are supported. |
14 | */ |
15 | #define TSM_PRIVLEVEL_MAX 3 |
16 | |
17 | /** |
18 | * struct tsm_desc - option descriptor for generating tsm report blobs |
19 | * @privlevel: optional privilege level to associate with @outblob |
20 | * @inblob_len: sizeof @inblob |
21 | * @inblob: arbitrary input data |
22 | */ |
23 | struct tsm_desc { |
24 | unsigned int privlevel; |
25 | size_t inblob_len; |
26 | u8 inblob[TSM_INBLOB_MAX]; |
27 | }; |
28 | |
29 | /** |
30 | * struct tsm_report - track state of report generation relative to options |
31 | * @desc: input parameters to @report_new() |
32 | * @outblob_len: sizeof(@outblob) |
33 | * @outblob: generated evidence to provider to the attestation agent |
34 | * @auxblob_len: sizeof(@auxblob) |
35 | * @auxblob: (optional) auxiliary data to the report (e.g. certificate data) |
36 | */ |
37 | struct tsm_report { |
38 | struct tsm_desc desc; |
39 | size_t outblob_len; |
40 | u8 *outblob; |
41 | size_t auxblob_len; |
42 | u8 *auxblob; |
43 | }; |
44 | |
45 | /** |
46 | * struct tsm_ops - attributes and operations for tsm instances |
47 | * @name: tsm id reflected in /sys/kernel/config/tsm/report/$report/provider |
48 | * @privlevel_floor: convey base privlevel for nested scenarios |
49 | * @report_new: Populate @report with the report blob and auxblob |
50 | * (optional), return 0 on successful population, or -errno otherwise |
51 | * |
52 | * Implementation specific ops, only one is expected to be registered at |
53 | * a time i.e. only one of "sev-guest", "tdx-guest", etc. |
54 | */ |
55 | struct tsm_ops { |
56 | const char *name; |
57 | const unsigned int privlevel_floor; |
58 | int (*report_new)(struct tsm_report *report, void *data); |
59 | }; |
60 | |
61 | extern const struct config_item_type tsm_report_default_type; |
62 | |
63 | /* publish @privlevel, @privlevel_floor, and @auxblob attributes */ |
64 | extern const struct config_item_type ; |
65 | |
66 | int tsm_register(const struct tsm_ops *ops, void *priv, |
67 | const struct config_item_type *type); |
68 | int tsm_unregister(const struct tsm_ops *ops); |
69 | #endif /* __TSM_H */ |
70 | |