]> git.ipfire.org Git - thirdparty/qemu.git/commit
device/virtio-nsm: Support for Nitro Secure Module device
authorDorjoy Chowdhury <dorjoychy111@gmail.com>
Tue, 8 Oct 2024 21:17:23 +0000 (03:17 +0600)
committerPaolo Bonzini <pbonzini@redhat.com>
Thu, 31 Oct 2024 17:28:32 +0000 (18:28 +0100)
commitbb154e3e0cc715605d915f0761e0cd7a4e64d1bd
treea27a518add1d27a06165b777aad336b52d4c4e9e
parent1ac32dc8eaa23e913be6afc175b2b43bf2aa5fac
device/virtio-nsm: Support for Nitro Secure Module device

Nitro Secure Module (NSM)[1] device is used in AWS Nitro Enclaves[2]
for stripped down TPM functionality like cryptographic attestation.
The requests to and responses from NSM device are CBOR[3] encoded.

This commit adds support for NSM device in QEMU. Although related to
AWS Nitro Enclaves, the virito-nsm device is independent and can be
used in other machine types as well. The libcbor[4] library has been
used for the CBOR encoding and decoding functionalities.

[1] https://lists.oasis-open.org/archives/virtio-comment/202310/msg00387.html
[2] https://docs.aws.amazon.com/enclaves/latest/user/nitro-enclave.html
[3] http://cbor.io/
[4] https://libcbor.readthedocs.io/en/latest/

Signed-off-by: Dorjoy Chowdhury <dorjoychy111@gmail.com>
Reviewed-by: Alexander Graf <graf@amazon.com>
Link: https://lore.kernel.org/r/20241008211727.49088-3-dorjoychy111@gmail.com
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
12 files changed:
Kconfig.host
MAINTAINERS
hw/virtio/Kconfig
hw/virtio/cbor-helpers.c [new file with mode: 0644]
hw/virtio/meson.build
hw/virtio/virtio-nsm-pci.c [new file with mode: 0644]
hw/virtio/virtio-nsm.c [new file with mode: 0644]
include/hw/virtio/cbor-helpers.h [new file with mode: 0644]
include/hw/virtio/virtio-nsm.h [new file with mode: 0644]
meson.build
meson_options.txt
scripts/meson-buildoptions.sh