github-mirror/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-11-07 06:17:02 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity Graph

virt: tdx-guest: Make the Quote buffer size dynamic

Browse Source 
Support a new TDX module ABI that reports the Quote size limit in a
metadata field. The fixed 128KB buffer in the driver may be too small
for Quotes that use new algorithms like post-quantum cryptography (PQC),
which can produce much larger certificates. With this ABI, the guest
sizes the buffer to the platform's needs and no longer has to rely on
some empirical number.

The shared buffer comes from the buddy allocator, as the host expects it
to be physically contiguous. The allocator's page order limit should be
sufficient for current attestation needs. Platforms that don't report
the limit fall back to the default 128KB buffer.

Assume the TDX module always reports the same size. It is a TDX module
bug if the size changes.

AI was used under supervision to collect/apply feedback, review code and
workshop logs.

Based on a patch originally by Kuppuswamy Sathyanarayanan.

Signed-off-by: Peter Fang <peter.fang@intel.com>
Signed-off-by: Dave Hansen <dave.hansen@linux.intel.com>
Reviewed-by: Rick Edgecombe <rick.p.edgecombe@intel.com>
Link: https://patch.msgid.link/20260930103739.2851980-7-peter.fang@intel.com
This commit is contained in:
Peter Fang 2026-09-30 03:30:55 -07:00 committed by Dave Hansen
parent a2bf0ccd55
commit 5b8212d45d
2 changed files with 15 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
arch/x86/coco/tdx/tdx.c
View File

@ -213,6 +213,7 @@ int tdx_get_max_quote_size(u64 *max_quote_size)
return 0;
}
EXPORT_SYMBOL_FOR_MODULES(tdx_get_max_quote_size, "tdx-guest");
static void __noreturn tdx_panic(const char *msg)
{

15
drivers/virt/coco/tdx-guest/tdx-guest.c
View File

@ -209,7 +209,20 @@ static long tdx_get_report0(struct tdx_report_req __user *req)
/* Size of the header metadata plus the largest possible raw Quote. */
static size_t get_quote_buf_size(void)
{
return TDX_DEFAULT_QUOTE_SIZE;
size_t buf_size;
u64 max_size;
/* Start with the default buffer size, which includes the header */
buf_size = TDX_DEFAULT_QUOTE_SIZE;
/*
* Override the default when the TDX module reports a size. Add room
* for the header metadata. The size is fixed during TD runtime.
*/
if (!tdx_get_max_quote_size(&max_size))
buf_size = struct_size_t(struct tdx_quote_buf, data, max_size);
return buf_size;
}
static void free_quote_buf(struct tdx_quote_buf *buf)