From nobody Mon Nov 25 13:38:55 2024 Received: from NAM11-BN8-obe.outbound.protection.outlook.com (mail-bn8nam11on2089.outbound.protection.outlook.com [40.107.236.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 80766190079; Mon, 28 Oct 2024 05:35:23 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=fail smtp.client-ip=40.107.236.89 ARC-Seal: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1730093726; cv=fail; b=Mg6c97M/x+0rkeyrvxSAtFqGvnXVLgvNE8evpJ4LIb+s+5jW3vdXMW3Ps5b6OURC6YYDSCv4M9lUCQdmmeqtQVpKLA8doy2EJXuxsO2pU6qpAbNWg61VKGWuLp7NATpdvDXuuBgsp1YDeQo+GWsCISBb8lC0YLbkHLxKLSssdKQ= ARC-Message-Signature: i=2; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1730093726; c=relaxed/simple; bh=5O6370OwjE0Ca04YwZ2U8AgGgGU/W+46HjtUPOt1iQg=; h=From:To:CC:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version:Content-Type; b=UF/1Gb5M1KdgW0w5yJoFMQCKeeWzSZkEXYsBxBlfe9/iiX0qe5V9YQ8yLJ5WBowB0/kcxglnAP7H310SNkGb0vhztv2R/t1I6iMUfit3QBOs0NIk68391CnFSJR6MjvwA6bGcMax4ASDqcXneQOov2dCQvp933FyXQ5hBuB7sYE= ARC-Authentication-Results: i=2; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=amd.com; spf=fail smtp.mailfrom=amd.com; dkim=pass (1024-bit key) header.d=amd.com header.i=@amd.com header.b=AaiKOw5v; arc=fail smtp.client-ip=40.107.236.89 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=amd.com Authentication-Results: smtp.subspace.kernel.org; spf=fail smtp.mailfrom=amd.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=amd.com header.i=@amd.com header.b="AaiKOw5v" ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=pDdQ5lRMMlFf5VpJEilV3cc3rEv8AahMAu7r3jSMVwILQ/fkN8b911c9hJtIeBsqo6XdRfHH5xnwAMm9I1ZaULPEMrbx4j8++sl9Gg/60kYBmUnlnn8aTNz/lTfKKcFQ6oTlMzZ6MFulwh8hE5jMo7lJ2kiO+23ZWcIrujUBJdyjMtuuvbDNhR+eU3pXCrmv2usNxE4e1J+SOFKuqKrtLob6hXE4TWkD3pWqRKSAvNBrVW0aF5iiMPGdAsPoXb7x9yiZTw2LAvPoYobhf2oHhKQyw0KW+XC4GpBmYweqWFI3XYKSHL4S+zKsDUHbvVbukbnHlX9L+1gUgFSfP315jQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=rQQnCe2bBeTrqq0wJPkrQAKDQ2OuPHAVeGY0I+nKRSA=; b=kCvSmAMRq8rFuf2NopFwmXfrlrgGsKEzKAxsHntOL98dYrP25p+s7i0LbxDl0IFpG+zpzbTYJTZJdXtCjeZ720QmP+X4B36Y2NSxzq02/Ue/bD5VyVREadG99l3D1JduHa4WF3gJ4JY+y6LmE4uBLKiRkVS/8nDQfbGViUsC4SH8nnxHIoCbxEoTJXU9yqlmOHiOQyWIBwcf3wRsS/UM6E2fl39Z0IUYG2kTcPhiClnZs3mSwRAv3pGVxLHfi0VmmNxcH7r27CrQmfnCT7vXDJsXSjoNTs+/5UGII3Dwzb+6KAJczvUSYyxUmS8z1Uul766RLNjk8AJKz/oX+NdjRg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 165.204.84.17) smtp.rcpttodomain=vger.kernel.org smtp.mailfrom=amd.com; dmarc=pass (p=quarantine sp=quarantine pct=100) action=none header.from=amd.com; dkim=none (message not signed); arc=none (0) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amd.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rQQnCe2bBeTrqq0wJPkrQAKDQ2OuPHAVeGY0I+nKRSA=; b=AaiKOw5vHwcBIP6jc7y2nzn5BWmJ7zSxkXnAwknGThPXxoTh05j3sWITxGhXf2SIc9aNE4GpMr75pFah6TxXc+9ur5lVS+oF/61FatA9JnkfweS8CpUmzyYJIS6wxfCboX0U8Jo1DHmnoniaDOU4ZigAUMsajwpVTJfEUbiKMxM= Received: from BN1PR14CA0017.namprd14.prod.outlook.com (2603:10b6:408:e3::22) by SN7PR12MB8004.namprd12.prod.outlook.com (2603:10b6:806:341::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8069.27; Mon, 28 Oct 2024 05:35:20 +0000 Received: from BL6PEPF0001AB58.namprd02.prod.outlook.com (2603:10b6:408:e3:cafe::12) by BN1PR14CA0017.outlook.office365.com (2603:10b6:408:e3::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8093.25 via Frontend Transport; Mon, 28 Oct 2024 05:35:20 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 165.204.84.17) smtp.mailfrom=amd.com; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=amd.com; Received-SPF: Pass (protection.outlook.com: domain of amd.com designates 165.204.84.17 as permitted sender) receiver=protection.outlook.com; client-ip=165.204.84.17; helo=SATLEXMB04.amd.com; pr=C Received: from SATLEXMB04.amd.com (165.204.84.17) by BL6PEPF0001AB58.mail.protection.outlook.com (10.167.241.10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.20.8114.16 via Frontend Transport; Mon, 28 Oct 2024 05:35:20 +0000 Received: from gomati.amd.com (10.180.168.240) by SATLEXMB04.amd.com (10.181.40.145) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id 15.1.2507.39; Mon, 28 Oct 2024 00:35:16 -0500 From: Nikunj A Dadhania To: , , , , CC: , , , , , , Subject: [PATCH v14 03/13] x86/sev: Add Secure TSC support for SNP guests Date: Mon, 28 Oct 2024 11:04:21 +0530 Message-ID: <20241028053431.3439593-4-nikunj@amd.com> X-Mailer: git-send-email 2.34.1 In-Reply-To: <20241028053431.3439593-1-nikunj@amd.com> References: <20241028053431.3439593-1-nikunj@amd.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable X-ClientProxiedBy: SATLEXMB03.amd.com (10.181.40.144) To SATLEXMB04.amd.com (10.181.40.145) X-EOPAttributedMessage: 0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: BL6PEPF0001AB58:EE_|SN7PR12MB8004:EE_ X-MS-Office365-Filtering-Correlation-Id: ab84cba3-6df2-4ea8-8794-08dcf7124ff9 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|7416014|376014|1800799024|82310400026|36860700013; X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?31wAuoy4+7ZoJs4/BXBnsANzUv5wy/1rkSeg/KtuesNRMUpIBV+UKI1Nj2D+?= =?us-ascii?Q?1wunXNXp5b9Gq+F7KPUKBEc4+vEnOFzOL0SskFi3nWNwf3ufQtftw2fctMxl?= =?us-ascii?Q?CTukmAyMgPlyQHsa1HHZ9506uojZ4Em9TBBz8Q+YlwcOthwQ9nrLQwq3x2I0?= =?us-ascii?Q?qyk3+cQTOSyjTIk1IH7D9s2cAiXD4K5IrrTBPdPEBvIH0cu9h4AXd0sFc8xM?= =?us-ascii?Q?lMEdKw3nUe5ZEfV7glTo9djGRoM6Ub2QPXBm+BCJ2jDA7kY3SO5/0ieZSCkS?= =?us-ascii?Q?aH+3D5B+FH3sh4ygUzT3MG3MCKezd47mjq9DQQclrVt2AH9Z20cetFW7Ge4t?= =?us-ascii?Q?wjshLN/9ZAryUI/2VmAGyjaiiE4cpOE6utssllJW2Jzz1CK16l4SVIdZmY0z?= =?us-ascii?Q?Fonskr1uJx0GK5k9L3JF5DKE5OCPWVWvzFjtVEfoGqJ+z9CxSrKNSbD1IfZE?= =?us-ascii?Q?tzPA3kdX3EOENJitknbjr6iePQbP70T3sflO0osM2xS6LMPuaFVtk+3kTAn6?= =?us-ascii?Q?YcCatVhe4CeT8amxGTlh8N4HVZLGzqGnryDsvdu2+M++Uy1Z6O0HliTNgG9s?= =?us-ascii?Q?K/W3tY1iYhhV8kgIcTIifB6ybvLI+gfHWU4vaMxt5kkyIp21jIxDNJpx62tL?= =?us-ascii?Q?bCQ149yROa1/0SuoRBzCZPl4/7H43P6p/GyanQR/bYgBsz324e6L8CyfSwOs?= =?us-ascii?Q?KicMiB/l3YrNXEPSAk1I3HMbkeFNnAvYU5xweyys2E3xfBqd/qn4qHRIvodA?= =?us-ascii?Q?zwuEX7FHQZwa3XrMVKUjsmNGpUnd2cNL8GnpAt4uIMTDjvCmMvgJ4T6Nko8O?= =?us-ascii?Q?4LcqP0Azi/UnDBzKTLsZto5W9ud7EPqwa8VbieMio7YSj77kJBGo35LXMcnw?= =?us-ascii?Q?BwNhJ1OEkpVRtAMgTs7pvCK0pJNJL+uORRq91gN9MwVN9rL3GkJOeHV1nm7J?= =?us-ascii?Q?oOlrnLgihomOV1tpWyvMF3Mt0O2WlJVGKtL8PPUJMNanUJ7fzF7BCD9Qa/EN?= =?us-ascii?Q?b2NTp7Bi71DYnQ07YNR37uGk5fe2KHGFyvOrYCR5BpKftJmOQjVJit0A5Uaa?= =?us-ascii?Q?JMx/5WZ2ph7YIBQl5gsJwmqW8VloQoR/L77Bu20LSNjLGbspqnRsTWgL/+E8?= =?us-ascii?Q?G6hQiBCierfTwMUEm60lx3Z7Bw1xTfZhWng3bEScLcvwskSMbke/mxBrLWJh?= =?us-ascii?Q?wHsQ/hYM42JFuDoAosK/Lcq7rrXS1sDXdNJhE6tGnUmG5QhRQAJHq5XLrKOr?= =?us-ascii?Q?SaEpUFIY+jkrXOnkWXsiDh7ayXBD/oh10S7pME4dtlXsqWQD9355RAYuYqxm?= =?us-ascii?Q?GylfUL4HCPC1ZI7XiRZxKoiHvkiBlyK6cnxwBHg/tRO4mqYt8vNSOfPoBiTn?= =?us-ascii?Q?P/OmatpJI1DgtxdOQw3/eRFAv3LG0J3+vNRqMOpTB2PAsLqixQ=3D=3D?= X-Forefront-Antispam-Report: CIP:165.204.84.17;CTRY:US;LANG:en;SCL:1;SRV:;IPV:CAL;SFV:NSPM;H:SATLEXMB04.amd.com;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(7416014)(376014)(1800799024)(82310400026)(36860700013);DIR:OUT;SFP:1101; X-OriginatorOrg: amd.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Oct 2024 05:35:20.2211 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: ab84cba3-6df2-4ea8-8794-08dcf7124ff9 X-MS-Exchange-CrossTenant-Id: 3dd8961f-e488-4e60-8e11-a82d994e183d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=3dd8961f-e488-4e60-8e11-a82d994e183d;Ip=[165.204.84.17];Helo=[SATLEXMB04.amd.com] X-MS-Exchange-CrossTenant-AuthSource: BL6PEPF0001AB58.namprd02.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN7PR12MB8004 Content-Type: text/plain; charset="utf-8" Add support for Secure TSC in SNP-enabled guests. Secure TSC allows guests to securely use RDTSC/RDTSCP instructions, ensuring that the parameters used cannot be altered by the hypervisor once the guest is launched. Secure TSC-enabled guests need to query TSC information from the AMD Security Processor. This communication channel is encrypted between the AMD Security Processor and the guest, with the hypervisor acting merely as a conduit to deliver the guest messages to the AMD Security Processor. Each message is protected with AEAD (AES-256 GCM). Use a minimal AES GCM library to encrypt and decrypt SNP guest messages for communication with the PSP. Use mem_encrypt_init() to fetch SNP TSC information from the AMD Security Processor and initialize snp_tsc_scale and snp_tsc_offset. During secondary CPU initialization, set the VMSA fields GUEST_TSC_SCALE (offset 2F0h) and GUEST_TSC_OFFSET (offset 2F8h) with snp_tsc_scale and snp_tsc_offset, respectively. Add confidential compute platform attribute CC_ATTR_GUEST_SNP_SECURE_TSC that can be used by the guest to query whether the Secure TSC feature is active. Since handle_guest_request() is common routine used by both the SEV guest driver and Secure TSC code, move it to the SEV header file. Signed-off-by: Nikunj A Dadhania Tested-by: Peter Gonda Reviewed-by: Tom Lendacky --- arch/x86/include/asm/sev-common.h | 1 + arch/x86/include/asm/sev.h | 46 ++++++++++++++++ arch/x86/include/asm/svm.h | 6 ++- include/linux/cc_platform.h | 8 +++ arch/x86/coco/core.c | 3 ++ arch/x86/coco/sev/core.c | 90 +++++++++++++++++++++++++++++++ arch/x86/mm/mem_encrypt.c | 4 ++ 7 files changed, 156 insertions(+), 2 deletions(-) diff --git a/arch/x86/include/asm/sev-common.h b/arch/x86/include/asm/sev-c= ommon.h index 50f5666938c0..6ef92432a5ce 100644 --- a/arch/x86/include/asm/sev-common.h +++ b/arch/x86/include/asm/sev-common.h @@ -206,6 +206,7 @@ struct snp_psc_desc { #define GHCB_TERM_NO_SVSM 7 /* SVSM is not advertised in the secrets page= */ #define GHCB_TERM_SVSM_VMPL0 8 /* SVSM is present but has set VMPL to 0 */ #define GHCB_TERM_SVSM_CAA 9 /* SVSM is present but CAA is not page align= ed */ +#define GHCB_TERM_SECURE_TSC 10 /* Secure TSC initialization failed */ =20 #define GHCB_RESP_CODE(v) ((v) & GHCB_MSR_INFO_MASK) =20 diff --git a/arch/x86/include/asm/sev.h b/arch/x86/include/asm/sev.h index 2c542b9e8dbf..d27c4e0f9f57 100644 --- a/arch/x86/include/asm/sev.h +++ b/arch/x86/include/asm/sev.h @@ -146,6 +146,9 @@ enum msg_type { SNP_MSG_VMRK_REQ, SNP_MSG_VMRK_RSP, =20 + SNP_MSG_TSC_INFO_REQ =3D 17, + SNP_MSG_TSC_INFO_RSP, + SNP_MSG_TYPE_MAX }; =20 @@ -174,6 +177,22 @@ struct snp_guest_msg { u8 payload[PAGE_SIZE - sizeof(struct snp_guest_msg_hdr)]; } __packed; =20 +#define SNP_TSC_INFO_REQ_SZ 128 +#define SNP_TSC_INFO_RESP_SZ 128 + +struct snp_tsc_info_req { + u8 rsvd[SNP_TSC_INFO_REQ_SZ]; +} __packed; + +struct snp_tsc_info_resp { + u32 status; + u32 rsvd1; + u64 tsc_scale; + u64 tsc_offset; + u32 tsc_factor; + u8 rsvd2[100]; +} __packed; + struct snp_guest_req { void *req_buf; size_t req_sz; @@ -497,6 +516,27 @@ static inline void snp_msg_cleanup(struct snp_msg_desc= *mdesc) int snp_send_guest_request(struct snp_msg_desc *mdesc, struct snp_guest_re= q *req, struct snp_guest_request_ioctl *rio); =20 +static inline int handle_guest_request(struct snp_msg_desc *mdesc, u64 exi= t_code, + struct snp_guest_request_ioctl *rio, u8 type, + void *req_buf, size_t req_sz, void *resp_buf, + u32 resp_sz) +{ + struct snp_guest_req req =3D { + .msg_version =3D rio->msg_version, + .msg_type =3D type, + .vmpck_id =3D mdesc->vmpck_id, + .req_buf =3D req_buf, + .req_sz =3D req_sz, + .resp_buf =3D resp_buf, + .resp_sz =3D resp_sz, + .exit_code =3D exit_code, + }; + + return snp_send_guest_request(mdesc, &req, rio); +} + +void __init snp_secure_tsc_prepare(void); + #else /* !CONFIG_AMD_MEM_ENCRYPT */ =20 #define snp_vmpl 0 @@ -538,6 +578,12 @@ static inline struct snp_msg_desc *snp_msg_alloc(void)= { return NULL; } static inline void snp_msg_cleanup(struct snp_msg_desc *mdesc) { } static inline int snp_send_guest_request(struct snp_msg_desc *mdesc, struc= t snp_guest_req *req, struct snp_guest_request_ioctl *rio) { return -ENODEV; } +static inline int handle_guest_request(struct snp_msg_desc *mdesc, u64 exi= t_code, + struct snp_guest_request_ioctl *rio, u8 type, + void *req_buf, size_t req_sz, void *resp_buf, + u32 resp_sz) { return -ENODEV; } + +static inline void __init snp_secure_tsc_prepare(void) { } =20 #endif /* CONFIG_AMD_MEM_ENCRYPT */ =20 diff --git a/arch/x86/include/asm/svm.h b/arch/x86/include/asm/svm.h index 2b59b9951c90..92e18798f197 100644 --- a/arch/x86/include/asm/svm.h +++ b/arch/x86/include/asm/svm.h @@ -417,7 +417,9 @@ struct sev_es_save_area { u8 reserved_0x298[80]; u32 pkru; u32 tsc_aux; - u8 reserved_0x2f0[24]; + u64 tsc_scale; + u64 tsc_offset; + u8 reserved_0x300[8]; u64 rcx; u64 rdx; u64 rbx; @@ -564,7 +566,7 @@ static inline void __unused_size_checks(void) BUILD_BUG_RESERVED_OFFSET(sev_es_save_area, 0x1c0); BUILD_BUG_RESERVED_OFFSET(sev_es_save_area, 0x248); BUILD_BUG_RESERVED_OFFSET(sev_es_save_area, 0x298); - BUILD_BUG_RESERVED_OFFSET(sev_es_save_area, 0x2f0); + BUILD_BUG_RESERVED_OFFSET(sev_es_save_area, 0x300); BUILD_BUG_RESERVED_OFFSET(sev_es_save_area, 0x320); BUILD_BUG_RESERVED_OFFSET(sev_es_save_area, 0x380); BUILD_BUG_RESERVED_OFFSET(sev_es_save_area, 0x3f0); diff --git a/include/linux/cc_platform.h b/include/linux/cc_platform.h index caa4b4430634..cb7103dc124f 100644 --- a/include/linux/cc_platform.h +++ b/include/linux/cc_platform.h @@ -88,6 +88,14 @@ enum cc_attr { * enabled to run SEV-SNP guests. */ CC_ATTR_HOST_SEV_SNP, + + /** + * @CC_ATTR_GUEST_SNP_SECURE_TSC: SNP Secure TSC is active. + * + * The platform/OS is running as a guest/virtual machine and actively + * using AMD SEV-SNP Secure TSC feature. + */ + CC_ATTR_GUEST_SNP_SECURE_TSC, }; =20 #ifdef CONFIG_ARCH_HAS_CC_PLATFORM diff --git a/arch/x86/coco/core.c b/arch/x86/coco/core.c index 0f81f70aca82..5b9a358a3254 100644 --- a/arch/x86/coco/core.c +++ b/arch/x86/coco/core.c @@ -100,6 +100,9 @@ static bool noinstr amd_cc_platform_has(enum cc_attr at= tr) case CC_ATTR_HOST_SEV_SNP: return cc_flags.host_sev_snp; =20 + case CC_ATTR_GUEST_SNP_SECURE_TSC: + return sev_status & MSR_AMD64_SNP_SECURE_TSC; + default: return false; } diff --git a/arch/x86/coco/sev/core.c b/arch/x86/coco/sev/core.c index c96b742789c5..88cae62382c2 100644 --- a/arch/x86/coco/sev/core.c +++ b/arch/x86/coco/sev/core.c @@ -98,6 +98,10 @@ static u64 secrets_pa __ro_after_init; =20 static struct snp_msg_desc *snp_mdesc; =20 +/* Secure TSC values read using TSC_INFO SNP Guest request */ +static u64 snp_tsc_scale __ro_after_init; +static u64 snp_tsc_offset __ro_after_init; + /* #VC handler runtime per-CPU data */ struct sev_es_runtime_data { struct ghcb ghcb_page; @@ -1148,6 +1152,12 @@ static int wakeup_cpu_via_vmgexit(u32 apic_id, unsig= ned long start_ip) vmsa->vmpl =3D snp_vmpl; vmsa->sev_features =3D sev_status >> 2; =20 + /* Set Secure TSC parameters */ + if (cc_platform_has(CC_ATTR_GUEST_SNP_SECURE_TSC)) { + vmsa->tsc_scale =3D snp_tsc_scale; + vmsa->tsc_offset =3D snp_tsc_offset; + } + /* Switch the page over to a VMSA page now that it is initialized */ ret =3D snp_set_vmsa(vmsa, caa, apic_id, true); if (ret) { @@ -2942,3 +2952,83 @@ int snp_send_guest_request(struct snp_msg_desc *mdes= c, struct snp_guest_req *req return 0; } EXPORT_SYMBOL_GPL(snp_send_guest_request); + +static int __init snp_get_tsc_info(void) +{ + static u8 buf[SNP_TSC_INFO_RESP_SZ + AUTHTAG_LEN]; + struct snp_guest_request_ioctl rio; + struct snp_tsc_info_resp tsc_resp; + struct snp_tsc_info_req *tsc_req; + struct snp_msg_desc *mdesc; + struct snp_guest_req req; + int rc; + + /* + * The intermediate response buffer is used while decrypting the + * response payload. Make sure that it has enough space to cover the + * authtag. + */ + BUILD_BUG_ON(sizeof(buf) < (sizeof(tsc_resp) + AUTHTAG_LEN)); + + mdesc =3D snp_msg_alloc(); + if (IS_ERR_OR_NULL(mdesc)) + return -ENOMEM; + + rc =3D snp_msg_init(mdesc, snp_vmpl); + if (rc) + return rc; + + tsc_req =3D kzalloc(sizeof(struct snp_tsc_info_req), GFP_KERNEL); + if (!tsc_req) + return -ENOMEM; + + memset(&req, 0, sizeof(req)); + memset(&rio, 0, sizeof(rio)); + memset(buf, 0, sizeof(buf)); + + req.msg_version =3D MSG_HDR_VER; + req.msg_type =3D SNP_MSG_TSC_INFO_REQ; + req.vmpck_id =3D snp_vmpl; + req.req_buf =3D tsc_req; + req.req_sz =3D sizeof(*tsc_req); + req.resp_buf =3D buf; + req.resp_sz =3D sizeof(tsc_resp) + AUTHTAG_LEN; + req.exit_code =3D SVM_VMGEXIT_GUEST_REQUEST; + + rc =3D snp_send_guest_request(mdesc, &req, &rio); + if (rc) + goto err_req; + + memcpy(&tsc_resp, buf, sizeof(tsc_resp)); + pr_debug("%s: response status %x scale %llx offset %llx factor %x\n", + __func__, tsc_resp.status, tsc_resp.tsc_scale, tsc_resp.tsc_offset, + tsc_resp.tsc_factor); + + if (tsc_resp.status =3D=3D 0) { + snp_tsc_scale =3D tsc_resp.tsc_scale; + snp_tsc_offset =3D tsc_resp.tsc_offset; + } else { + pr_err("Failed to get TSC info, response status %x\n", tsc_resp.status); + rc =3D -EIO; + } + +err_req: + /* The response buffer contains the sensitive data, explicitly clear it. = */ + memzero_explicit(buf, sizeof(buf)); + memzero_explicit(&tsc_resp, sizeof(tsc_resp)); + + return rc; +} + +void __init snp_secure_tsc_prepare(void) +{ + if (!cc_platform_has(CC_ATTR_GUEST_SNP_SECURE_TSC)) + return; + + if (snp_get_tsc_info()) { + pr_alert("Unable to retrieve Secure TSC info from ASP\n"); + sev_es_terminate(SEV_TERM_SET_LINUX, GHCB_TERM_SECURE_TSC); + } + + pr_debug("SecureTSC enabled"); +} diff --git a/arch/x86/mm/mem_encrypt.c b/arch/x86/mm/mem_encrypt.c index 0a120d85d7bb..996ca27f0b72 100644 --- a/arch/x86/mm/mem_encrypt.c +++ b/arch/x86/mm/mem_encrypt.c @@ -94,6 +94,10 @@ void __init mem_encrypt_init(void) /* Call into SWIOTLB to update the SWIOTLB DMA buffers */ swiotlb_update_mem_attributes(); =20 + /* Initialize SNP Secure TSC */ + if (cc_platform_has(CC_ATTR_GUEST_SEV_SNP)) + snp_secure_tsc_prepare(); + print_mem_encrypt_feature_info(); } =20 --=20 2.34.1