[v6] Initial support for SPDM Responders

[PATCH v6 0/3] Initial support for SPDM Responders

Alistair Francis posted 3 patches 1 month, 2 weeks ago

Diff against v2 v3 v4 v5
Download series mbox

Patches applied successfully (tree, apply log)
git fetch https://github.com/patchew-project/qemu tags/patchew/20240311011537.65043-1-alistair.francis@wdc.com

Maintainers: Paolo Bonzini <pbonzini@redhat.com>, Alistair Francis <alistair.francis@wdc.com>, Keith Busch <kbusch@kernel.org>, Klaus Jensen <its@irrelevant.dk>, "Michael S. Tsirkin" <mst@redhat.com>, Marcel Apfelbaum <marcel.apfelbaum@gmail.com>, Huai-Cheng Kuo <hchkuo@avery-design.com.tw>, Chris Browy <cbrowy@avery-design.com>

MAINTAINERS                  |   6 +
docs/specs/index.rst         |   1 +
docs/specs/spdm.rst          | 122 ++++++++++++++++++++
include/hw/pci/pci_device.h  |   5 +
include/hw/pci/pcie_doe.h    |   5 +
include/sysemu/spdm-socket.h |  74 ++++++++++++
backends/spdm-socket.c       | 216 +++++++++++++++++++++++++++++++++++
hw/nvme/ctrl.c               |  57 +++++++++
backends/Kconfig             |   4 +
backends/meson.build         |   2 +
10 files changed, 492 insertions(+)
create mode 100644 docs/specs/spdm.rst
create mode 100644 include/sysemu/spdm-socket.h
create mode 100644 backends/spdm-socket.c

Expand all Fold all

[PATCH v6 0/3] Initial support for SPDM Responders

Posted by Alistair Francis 1 month, 2 weeks ago

The Security Protocol and Data Model (SPDM) Specification defines
messages, data objects, and sequences for performing message exchanges
over a variety of transport and physical media.
 - https://www.dmtf.org/sites/default/files/standards/documents/DSP0274_1.3.0.pdf

SPDM currently supports PCIe DOE and MCTP transports, but it can be
extended to support others in the future. This series adds
support to QEMU to connect to an external SPDM instance.

SPDM support can be added to any QEMU device by exposing a
TCP socket to a SPDM server. The server can then implement the SPDM
decoding/encoding support, generally using libspdm [1].

This is similar to how the current TPM implementation works and means
that the heavy lifting of setting up certificate chains, capabilities,
measurements and complex crypto can be done outside QEMU by a well
supported and tested library.

This series implements socket support and exposes SPDM for a NVMe device.

1: https://github.com/DMTF/libspdm

v6:
 - Add documentation to public functions
 - Rename socket variable to spdm_socket
 - Don't override errp
 - Correctly return false from nvme_init_pci() on error
v5:
 - Update MAINTAINERS
v4:
 - Rebase
v3:
 - Spelling fixes
 - Support for SPDM-Utils
v2:
 - Add cover letter
 - A few code fixes based on comments
 - Document SPDM-Utils
 - A few tweaks and clarifications to the documentation

Alistair Francis (1):
  hw/pci: Add all Data Object Types defined in PCIe r6.0

Huai-Cheng Kuo (1):
  backends: Initial support for SPDM socket support

Wilfred Mallawa (1):
  hw/nvme: Add SPDM over DOE support

 MAINTAINERS                  |   6 +
 docs/specs/index.rst         |   1 +
 docs/specs/spdm.rst          | 122 ++++++++++++++++++++
 include/hw/pci/pci_device.h  |   5 +
 include/hw/pci/pcie_doe.h    |   5 +
 include/sysemu/spdm-socket.h |  74 ++++++++++++
 backends/spdm-socket.c       | 216 +++++++++++++++++++++++++++++++++++
 hw/nvme/ctrl.c               |  57 +++++++++
 backends/Kconfig             |   4 +
 backends/meson.build         |   2 +
 10 files changed, 492 insertions(+)
 create mode 100644 docs/specs/spdm.rst
 create mode 100644 include/sysemu/spdm-socket.h
 create mode 100644 backends/spdm-socket.c

-- 
2.44.0