Re: [PATCH v9 06/19] x86: Add early SHA-1 support for Secure Launch early measurements

On 5/30/24 7:16 PM, Eric Biggers wrote: On Thu, May 30, 2024 at 06:03:18PM -0700, Ross Philipson wrote: From: "Daniel P. Smith" For better or worse, Secure Launch needs SHA-1 and SHA-256. The choice of hashes used lie with the platform firmware, not with software, and is often outside of the u

Re: [PATCH v9 08/19] x86: Secure Launch kernel early boot stub

On Fri, 31 May 2024 at 16:04, Ard Biesheuvel wrote: > > On Fri, 31 May 2024 at 15:33, Ard Biesheuvel wrote: > > > > On Fri, 31 May 2024 at 13:00, Ard Biesheuvel wrote: > > > > > > Hello Ross, > > > > > > On Fri, 31 May 2024 at 03:32, Ross Philipson > > > wrote: > > > > > > > > The Secure Launc

Re: [PATCH v9 06/19] x86: Add early SHA-1 support for Secure Launch early measurements

Eric Biggers writes: > On Thu, May 30, 2024 at 06:03:18PM -0700, Ross Philipson wrote: >> From: "Daniel P. Smith" >> >> For better or worse, Secure Launch needs SHA-1 and SHA-256. The >> choice of hashes used lie with the platform firmware, not with >> software, and is often outside of the user

Re: [PATCH v9 08/19] x86: Secure Launch kernel early boot stub

On Fri, 31 May 2024 at 15:33, Ard Biesheuvel wrote: > > On Fri, 31 May 2024 at 13:00, Ard Biesheuvel wrote: > > > > Hello Ross, > > > > On Fri, 31 May 2024 at 03:32, Ross Philipson > > wrote: > > > > > > The Secure Launch (SL) stub provides the entry point for Intel TXT (and > > > later AMD SKI

Re: [PATCH v9 08/19] x86: Secure Launch kernel early boot stub

On Fri, 31 May 2024 at 13:00, Ard Biesheuvel wrote: > > Hello Ross, > > On Fri, 31 May 2024 at 03:32, Ross Philipson > wrote: > > > > The Secure Launch (SL) stub provides the entry point for Intel TXT (and > > later AMD SKINIT) to vector to during the late launch. The symbol > > sl_stub_entry is

Re: [PATCH v9 19/19] x86: EFI stub DRTM launch support for Secure Launch

On Fri, 31 May 2024 at 03:32, Ross Philipson wrote: > > This support allows the DRTM launch to be initiated after an EFI stub > launch of the Linux kernel is done. This is accomplished by providing > a handler to jump to when a Secure Launch is in progress. This has to be > called after the EFI st

Re: [PATCH v9 08/19] x86: Secure Launch kernel early boot stub

Hello Ross, On Fri, 31 May 2024 at 03:32, Ross Philipson wrote: > > The Secure Launch (SL) stub provides the entry point for Intel TXT (and > later AMD SKINIT) to vector to during the late launch. The symbol > sl_stub_entry is that entry point and its offset into the kernel is > conveyed to the l