Re: [PATCH v5 04/10] PCI/TSM: Authenticate devices via platform TSM

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 





On 6/9/25 12:07, dan.j.williams@xxxxxxxxx wrote:
Alexey Kardashevskiy wrote:
[..]
TDISP without IDE still needs to do all of SPDM (Component Measurement and
Authentication),

Support for PCI_DOE_FEATURE_CMA_SPDM says that then.

Right, the TSM core looks for that (PCI_DOE_PROTO_CMA) as part of
connect because it needs that either for TDISP or IDE.

The quoted bit looks for PCI_EXP_DEVCAP_TEE.

and the TDISP state machine.

I'd think PCI_EXP_DEVCAP_TEE is set on something which allows
START_INTERFACE_REQUEST and some SRIOV devices may not want to allow
this on PF0. I am likely to be wrong here then. Hm.

PCI_EXP_DEVCAP_TEE is the only way to identify TDISP capable devices in
the guest, right?

Right.

So PCI_EXP_DEVCAP_TEE means that there may be a DSM,

This bit I am not sure about. A bit hard to believe that PF0 is always expected to support passing through to a CVM. Thanks,

or a guest-side TSM tunnel to a DSM, that can affect the TDISP state of
this function.


--
Alexey





[Index of Archives]     [DMA Engine]     [Linux Coverity]     [Linux USB]     [Video for Linux]     [Linux Audio Users]     [Yosemite News]     [Linux Kernel]     [Linux SCSI]     [Greybus]

  Powered by Linux