]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
coco/tsm: Introduce a core device for TEE Security Managers
authorDan Williams <dan.j.williams@intel.com>
Fri, 31 Oct 2025 21:28:53 +0000 (14:28 -0700)
committerDan Williams <dan.j.williams@intel.com>
Tue, 4 Nov 2025 03:27:40 +0000 (19:27 -0800)
commit603c646f001008eaf8b5a7a888043e5cc8c494a2
tree42511c739b930173138ae379c17a52db5d4b9ee8
parent6146a0f1dfae5d37442a9ddcba012add260bceb0
coco/tsm: Introduce a core device for TEE Security Managers

A "TSM" is a platform component that provides an API for securely
provisioning resources for a confidential guest (TVM) to consume. The
name originates from the PCI specification for platform agent that
carries out operations for PCIe TDISP (TEE Device Interface Security
Protocol).

Instances of this core device are parented by a device representing the
platform security function like CONFIG_CRYPTO_DEV_CCP or
CONFIG_INTEL_TDX_HOST.

This device interface is a frontend to the aspects of a TSM and TEE I/O
that are cross-architecture common. This includes mechanisms like
enumerating available platform TEE I/O capabilities and provisioning
connections between the platform TSM and device DSMs (Device Security
Manager (TDISP)).

For now this is just the scaffolding for registering a TSM device sysfs
interface.

Cc: Xu Yilun <yilun.xu@linux.intel.com>
Reviewed-by: Jonathan Cameron <jonathan.cameron@huawei.com>
Co-developed-by: Aneesh Kumar K.V (Arm) <aneesh.kumar@kernel.org>
Signed-off-by: Aneesh Kumar K.V (Arm) <aneesh.kumar@kernel.org>
Acked-by: Bjorn Helgaas <bhelgaas@google.com>
Reviewed-by: Alexey Kardashevskiy <aik@amd.com>
Link: https://patch.msgid.link/20251031212902.2256310-2-dan.j.williams@intel.com
Signed-off-by: Dan Williams <dan.j.williams@intel.com>
Documentation/ABI/testing/sysfs-class-tsm [new file with mode: 0644]
MAINTAINERS
drivers/virt/coco/Kconfig
drivers/virt/coco/Makefile
drivers/virt/coco/tsm-core.c [new file with mode: 0644]
include/linux/tsm.h