This patch series provides an implementation of the the Data Object Exchange (DOE) for Component Measurement and Authentication (CMA) of the Security Protocol and Data Model (SPDM).
This patch is based on [1] [PATCH v1 openspdm on QEMU CXL/PCIe Device 0/2] Testing PCIe DOE in QEMU CXL/PCIe Device using openspdm https://lore.kernel.org/qemu-devel/1624665280-3595-1-git-send-email-cbr...@avery-design.com/T/#u [2] QEMU DOE: [PATCH v6 cxl2.0-v6-doe 0/6] QEMU PCIe DOE for PCIe 4.0/5.0 and CXL 2.0 https://lore.kernel.org/qemu-devel/1623329999-15662-1-git-send-email-cbr...@avery-design.com/ Openspdm is an emulator composed of an SPDM requester and an SPDM responder. The default SpdmEmu usage have the requester and responder communicate with each other via a TCP socket. However to test PCIe DOE support in QEMU PCIe/CXL device directly, the openspdm requester is modified to use pwrite/pread for MMIO access to the QEMU CXL Device DOE capability (hw/mem/cxl_type3.c). The openspdm requester is run as user application targeting the CXL Device. Follow the readme.md under [1] to build this enhanced version of openspdm. The QEMU CXL device is extended usig the "-spdm=<bool>" option to turn on/off the DOE/CMA capability. Once the option is turned on (-spdm=true) the CXL device can communicate with Openspdm's responder to get the data object of SPDM/secured SPDM. QEMU and SPDM responder communicate over client-server method. Build the QEMU with patch series applied to [2]. Now run the system as follows: 1. Start Responder process: ./openspdm/Build/RELEASE_GCC/X64/SpdmResponderEmu --trans PCI_DOE 2. Start QEMU process: qemu-system-x86_64 \ -nic user,hostfwd=tcp::2222-:22 \ -machine type=pc-q35-4.0 \ -smp 8,sockets=2,cores=2,threads=2 \ -m 4G \ -boot order=d \ -k 'en-us' \ -vga virtio \ -drive file=<path to qcow>,format=qcow2 \ -drive if=pflash,format=raw,readonly=on,file=<path to OVMF_CODE.fd> \ -drive if=pflash,format=raw,file=<path to OVMF_VARS.fd> \ -object memory-backend-file,id=cxl-mem2,share=on,mem-path=/tmp/cxl-mem2,size=1K \ -object memory-backend-file,id=cxl-mem1,share=on,mem-path=/tmp/cxl-mem,size=512M \ -device pxb-cxl,id=cxl.0,bus=pcie.0,bus_nr=52,uid=0,len-window-base=1,window-base[0]=0x4c0000000,memdev[0]=cxl-mem1 \ -device cxl-rp,id=rp0,bus=cxl.0,addr=0.0,chassis=0,slot=0 \ -device cxl-type3,bus=rp0,memdev=cxl-mem1,id=cxl-pmem0,size=256M,lsa=cxl-mem2,spdm=true 3. Next copy the openspdm build into QEMU qcow scp -rP2222 openspdm qemu@localhost:. 4. Next ssh to QEMU emulator and execute the requester user application sudo ./openspdm/Build/RELEASE_GCC/X64/SpdmRequesterEmu --trans PCI_DOE -s 35:00.0 hchkuo (1): pcie/spdm: PCIe CMA implementation hw/mem/cxl_type3.c | 31 +++- hw/pci/Kconfig | 4 + hw/pci/SpdmEmuCommand.c | 319 ++++++++++++++++++++++++++++++++++++++++ hw/pci/meson.build | 1 + include/hw/cxl/cxl_device.h | 2 + include/hw/pci/SpdmEmuCommand.h | 21 +++ include/hw/pci/pcie_doe.h | 2 + 7 files changed, 377 insertions(+), 3 deletions(-) create mode 100644 hw/pci/SpdmEmuCommand.c create mode 100644 include/hw/pci/SpdmEmuCommand.h -- 1.8.3.1
