The Security Protocol and Data Model (SPDM) Specification defines
messages, data objects, and sequences for performing message exchanges
over a variety of transport and physical media.
- https://www.dmtf.org/sites/default/files/standards/documents/DSP0274_1.3.0.pdf
SPDM currently supports PCIe DOE and MCTP transports, but it can be
extended to support others in the future. This series adds
support to QEMU to connect to an external SPDM instance.
SPDM support can be added to any QEMU device by exposing a
TCP socket to a SPDM server. The server can then implement the SPDM
decoding/encoding support, generally using libspdm [1].
This is similar to how the current TPM implementation works and means
that the heavy lifting of setting up certificate chains, capabilities,
measurements and complex crypto can be done outside QEMU by a well
supported and tested library.
This series implements socket support and exposes SPDM for a NVMe device.
1: https://github.com/DMTF/libspdm
v3:
- Spelling fixes
- Support for SPDM-Utils
v2:
- Add cover letter
- A few code fixes based on comments
- Document SPDM-Utils
- A few tweaks and clarifications to the documentation
Alistair Francis (1):
hw/pci: Add all Data Object Types defined in PCIe r6.0
Huai-Cheng Kuo (1):
backends: Initial support for SPDM socket support
Wilfred Mallawa (1):
hw/nvme: Add SPDM over DOE support
docs/specs/index.rst | 1 +
docs/specs/spdm.rst | 121 ++++++++++++++++++++
include/hw/pci/pci_device.h | 5 +
include/hw/pci/pcie_doe.h | 5 +
include/sysemu/spdm-socket.h | 44 +++++++
backends/spdm-socket.c | 216 +++++++++++++++++++++++++++++++++++
hw/nvme/ctrl.c | 53 +++++++++
backends/Kconfig | 4 +
backends/meson.build | 2 +
9 files changed, 451 insertions(+)
create mode 100644 docs/specs/spdm.rst
create mode 100644 include/sysemu/spdm-socket.h
create mode 100644 backends/spdm-socket.c
--
2.42.0