LXR qemu/target/i386/sev.h

   1/*
   2 * QEMU Secure Encrypted Virutualization (SEV) support
   3 *
   4 * Copyright: Advanced Micro Devices, 2016-2018
   5 *
   6 * Authors:
   7 *  Brijesh Singh <brijesh.singh@amd.com>
   8 *
   9 * This work is licensed under the terms of the GNU GPL, version 2 or later.
  10 * See the COPYING file in the top-level directory.
  11 *
  12 */
  13
  14#ifndef I386_SEV_H
  15#define I386_SEV_H
  16
  17#ifndef CONFIG_USER_ONLY
  18#include CONFIG_DEVICES /* CONFIG_SEV */
  19#endif
  20
  21#include "exec/confidential-guest-support.h"
  22
  23#define SEV_POLICY_NODBG        0x1
  24#define SEV_POLICY_NOKS         0x2
  25#define SEV_POLICY_ES           0x4
  26#define SEV_POLICY_NOSEND       0x8
  27#define SEV_POLICY_DOMAIN       0x10
  28#define SEV_POLICY_SEV          0x20
  29
  30typedef struct SevKernelLoaderContext {
  31    char *setup_data;
  32    size_t setup_size;
  33    char *kernel_data;
  34    size_t kernel_size;
  35    char *initrd_data;
  36    size_t initrd_size;
  37    char *cmdline_data;
  38    size_t cmdline_size;
  39} SevKernelLoaderContext;
  40
  41#ifdef CONFIG_SEV
  42bool sev_enabled(void);
  43bool sev_es_enabled(void);
  44#else
  45#define sev_enabled() 0
  46#define sev_es_enabled() 0
  47#endif
  48
  49extern uint32_t sev_get_cbit_position(void);
  50extern uint32_t sev_get_reduced_phys_bits(void);
  51extern bool sev_add_kernel_loader_hashes(SevKernelLoaderContext *ctx, Error **errp);
  52
  53int sev_encrypt_flash(uint8_t *ptr, uint64_t len, Error **errp);
  54int sev_inject_launch_secret(const char *hdr, const char *secret,
  55                             uint64_t gpa, Error **errp);
  56
  57int sev_es_save_reset_vector(void *flash_ptr, uint64_t flash_size);
  58void sev_es_set_reset_vector(CPUState *cpu);
  59
  60int sev_kvm_init(ConfidentialGuestSupport *cgs, Error **errp);
  61
  62#endif
  63