Messages in this thread | | | Date | Tue, 10 Oct 2023 23:29:00 +0200 | Subject | Re: [PATCH v5] misc: Add Nitro Secure Module driver | From | Alexander Graf <> |
| |
On 10.10.23 22:34, Michael S. Tsirkin wrote: > > On Tue, Oct 10, 2023 at 07:18:15PM +0000, Alexander Graf wrote: >> When running Linux inside a Nitro Enclave, the hypervisor provides a >> special virtio device called "Nitro Security Module" (NSM). This device >> has 3 main functions: >> >> 1) Provide attestation reports >> 2) Modify PCR state >> 3) Provide entropy >> >> This patch adds a driver for NSM that exposes a /dev/nsm device node which >> user space can issue an ioctl on this device with raw NSM CBOR formatted >> commands to request attestation documents, influence PCR states, read >> entropy and enumerate status of the device. In addition, the driver >> implements a hwrng backend. >> >> Originally-by: Petre Eftime <petre.eftime@gmail.com> >> Signed-off-by: Alexander Graf <graf@amazon.com> > Could some documentation about how this device works be posted on virtio > list please?
Sure! What is your preferred method to provide this? :)
Alex
Amazon Development Center Germany GmbH Krausenstr. 38 10117 Berlin Geschaeftsfuehrung: Christian Schlaeger, Jonathan Weiss Eingetragen am Amtsgericht Charlottenburg unter HRB 149173 B Sitz: Berlin Ust-ID: DE 289 237 879
| |