From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-wm1-f44.google.com (mail-wm1-f44.google.com [209.85.128.44]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id CB190384CE3 for ; Fri, 10 Jul 2026 09:01:46 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.128.44 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1783674108; cv=none; b=hCWesaNVlZuPZnQohYr397M7z0Bi3iLFrS31hHY8gXSg+tLDfVyCQ64z721MzhednuK0bqOuz3EejTtm5uIWp9VKBXj969/SO7lGoah6KmJRcRNwasiVyxHQj4W92b1qX5WMMH6XS+49kX/gahcj8qOtqtUheqZjVc5XrJKnaSA= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1783674108; c=relaxed/simple; bh=0bjgd3+mvjM+SD6+WctCfW2sEDqMAJmseiFloV+zTTg=; h=Message-ID:Date:MIME-Version:Subject:To:Cc:References:From: In-Reply-To:Content-Type; b=EWnkqI4GHq1Owxn6X1zoz6i/GUObVtBOB/oYlV3uDeMScc4M3bDsZTwmvuBtM3OWogkFTqWF4GYdwOZEgM21/wS/4ksBFje9MzblJMOL0LbdQjYjoRTbp3+ScGM+wxpJ9hYmtlEcN+mvA7lBaI1YX0P60CLmDWngXEkXg/2xJeE= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=suse.com; spf=pass smtp.mailfrom=suse.com; dkim=pass (2048-bit key) header.d=suse.com header.i=@suse.com header.b=DSJTayal; arc=none smtp.client-ip=209.85.128.44 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=quarantine dis=none) header.from=suse.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=suse.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=suse.com header.i=@suse.com header.b="DSJTayal" Received: by mail-wm1-f44.google.com with SMTP id 5b1f17b1804b1-493f60208a5so1441415e9.3 for ; Fri, 10 Jul 2026 02:01:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=suse.com; s=google; t=1783674105; x=1784278905; darn=vger.kernel.org; h=content-transfer-encoding:content-type:in-reply-to:autocrypt :content-language:from:references:cc:to:subject:user-agent :mime-version:date:message-id:from:to:cc:subject:date:message-id :reply-to:content-type; bh=GM/K7mEoxx2butYPcCAhdKcKE6yuKUATXnqo6Q9P4rU=; b=DSJTayalw7fgw2oikcsB3bZVqdtaZc+fdv34LdF3Ozw+QYS8vd/Pirqd2GsDjqzD9P tR0LWr0a5hNNBicfRNCFD4kHQ313CPVbCgsPLZBm4Prrnal1Yt3VWOJeersqvTytiWCy hQsr3bv+DCk+1Ft2HWhqvGv7Ev0TDwuXQBOdHqGPNHKQO19UV03kazq4iEA+q87BO0rP A7G3rhTRx+kyFj5hyjbqmg985IHYEOantFbmEWGXSWGJ+ym1jiZovtKXLn+aX/2Jd8fT KTPc/j/WpRdMBohlfrxsMejAQlJ60QDztjeLa/Bvpr7TZXws6DFSTY5kg69SfEQWiaJD rugg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1783674105; x=1784278905; h=content-transfer-encoding:content-type:in-reply-to:autocrypt :content-language:from:references:cc:to:subject:user-agent :mime-version:date:message-id:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to:content-type; bh=GM/K7mEoxx2butYPcCAhdKcKE6yuKUATXnqo6Q9P4rU=; b=YSrgVW1QgRB6T2pMyrBHtDK8V5znsIjunTpZdDn450tRC+1Uz6BiVBKUnGOSw0UEge am95Eh76M5KccNVksL2EPYQXULcqxYfOFzVG5XWarK2XIyAA1b+rvU5ct+HFfAkGMUYg xO7UKJSTgevvV0MctfIMG+l18VlqKDZXq8K1OgFPYSy17d3JYKKWrO6PR+DhteoXdM94 z0NtgGT8A22EAfcAjK5aIiOijwiNDaynSAjFid5StJjr0G/AStpgo6u3wzW4XLGWi8ie +e/JWshoYgFU7s6DsE9AIfR/rUGsPeqUNdLFSaMqR8mDnKkViKjK6e7qAxkBc1gcthSg U+iQ== X-Forwarded-Encrypted: i=1; AHgh+RpGFCd23g4UjUlXoGsN5qEBeFOQV/LQBPSc9jl04PgB2tadMauRIYuJbYyg3WXOsX8DVyQZf2ROD5snEYE=@vger.kernel.org X-Gm-Message-State: AOJu0YzC/B5fHIoo3EK554TNoQYAr0CNypu3yepVU3JTyXbn0FNs1C8s hJYpnRBE59omBvW40pw2gYw3QWJFpInuQnVH+W1Ghmf/ZqeXPdqRDl/JiSmWfTcRB3k= X-Gm-Gg: AfdE7cnki1+RemH93kpc9horIoxEpx0xI+Csu2tUmkMHylyGy9pFxT0HthKf3faN7cK FuLBiqSY3WGah/sNC2kR1B4xl5V5h86MIZqm9e03hA4bx4ILPk72DRSfgwtK5FzLXj26RSKv0e/ f3ukltgY6nm35044XXsYy9d7tiKGfTI7AE1RM7uPwQTl2L4z58+/1Oaz0eRnNB2NuVM/K+IvCCg 9F56BmPORWz+uk/hdd/+yRCx1zC+U4/R7qnVbo7k2t/hMB4PyPeUr+vJh/n3F/2ukOyjl0UA7pP TRwfDbVHWmhSMjizwpfrEtLOFkaocZhQBEOcMV1M8kbwnLxvo1kj3ZK3Bb4eC02l+jII/4RUvzB +jHybvW8fpjNkE2JTAkDl4faP3vjJpk8dwBw/HZqUE3m2ib/zBZJTX8Hlieu0Yo88F454CH9ztf IB+BCvW4YHItoCaWg= X-Received: by 2002:a05:600c:1d25:b0:493:e79e:da63 with SMTP id 5b1f17b1804b1-493e79edbb0mr91113305e9.34.1783674104915; Fri, 10 Jul 2026 02:01:44 -0700 (PDT) Received: from [10.20.4.146] ([149.62.207.236]) by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-493eb6ccdbbsm127156535e9.3.2026.07.10.02.01.42 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Fri, 10 Jul 2026 02:01:44 -0700 (PDT) Message-ID: Date: Fri, 10 Jul 2026 12:01:41 +0300 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PATCH v2 16/17] KVM: TDX: Add in-kernel Quote generation To: Peter Fang , "Edgecombe, Rick P" Cc: "seanjc@google.com" , "djbw@kernel.org" , "kvm@vger.kernel.org" , "linux-coco@lists.linux.dev" , "Li, Xiaoyao" , "Hansen, Dave" , "dave.hansen@linux.intel.com" , "baolu.lu@linux.intel.com" , "Hunter, Adrian" , "kas@kernel.org" , "tony.lindgren@linux.intel.com" , "Xu, Yilun" , "linux-kernel@vger.kernel.org" , "Mehta, Sohil" , "Duan, Zhenzhong" , "Maloor, Kishen" , "yilun.xu@linux.intel.com" , "x86@kernel.org" References: <20260618081355.3253581-1-yilun.xu@linux.intel.com> <20260618081355.3253581-17-yilun.xu@linux.intel.com> <20260629100301.GA1743876@pedri> <23a9173f6e278ca7dfedce3374626c6ea3e1b47a.camel@intel.com> <6a445e4be6b12_3a3568100db@djbw-dev.notmuch> <9df36c49e6be69dd9eece71f70a404a84b1563ab.camel@intel.com> <20260704054342.GB2169894@pedri> From: Nikolay Borisov Content-Language: en-US Autocrypt: addr=nik.borisov@suse.com; keydata= xsFNBGcrpvIBEAD5cAR5+qu30GnmPrK9veWX5RVzzbgtkk9C/EESHy9Yz0+HWgCVRoNyRQsZ 7DW7vE1KhioDLXjDmeu8/0A8u5nFMqv6d1Gt1lb7XzSAYw7uSWXLPEjFBtz9+fBJJLgbYU7G OpTKy6gRr6GaItZze+r04PGWjeyVUuHZuncTO7B2huxcwIk9tFtRX21gVSOOC96HcxSVVA7X N/LLM2EOL7kg4/yDWEhAdLQDChswhmdpHkp5g6ytj9TM8bNlq9I41hl/3cBEeAkxtb/eS5YR 88LBb/2FkcGnhxkGJPNB+4Siku7K8Mk2Y6elnkOctJcDvk29DajYbQnnW4nhfelZuLNupb1O M0912EvzOVI0dIVgR+xtosp66bYTOpX4Xb0fylED9kYGiuEAeoQZaDQ2eICDcHPiaLzh+6cc pkVTB0sXkWHUsPamtPum6/PgWLE9vGI5s+FaqBaqBYDKyvtJfLK4BdZng0Uc3ijycPs3bpbQ bOnK9LD8TYmYaeTenoNILQ7Ut54CCEXkP446skUMKrEo/HabvkykyWqWiIE/UlAYAx9+Ckho TT1d2QsmsAiYYWwjU8igXBecIbC0uRtF/cTfelNGrQwbICUT6kJjcOTpQDaVyIgRSlUMrlNZ XPVEQ6Zq3/aENA8ObhFxE5PLJPizJH6SC89BMKF3zg6SKx0qzQARAQABzSZOaWtvbGF5IEJv cmlzb3YgPG5pay5ib3Jpc292QHN1c2UuY29tPsLBkQQTAQoAOxYhBDuWB8EJLBUZCPjT3SRn XZEnyhfsBQJnK6byAhsDBQsJCAcCAiICBhUKCQgLAgQWAgMBAh4HAheAAAoJECRnXZEnyhfs XbIQAJxuUnelGdXbSbtovBNm+HF3LtT0XnZ0+DoR0DemUGuA1bZAlaOXGr5mvVbTgaoGUQIJ 3Ejx3UBEG7ZSJcfJobB34w1qHEDO0pN9orGIFT9Bic3lqhawD2r85QMcWwjsZH5FhyRx7P2o DTuUClLMO95GuHYQngBF2rHHl8QMJPVKsR18w4IWAhALpEApxa3luyV7pAAqKllfCNt7tmed uKmclf/Sz6qoP75CvEtRbfAOqYgG1Uk9A62C51iAPe35neMre3WGLsdgyMj4/15jPYi+tOUX Tc7AAWgc95LXyPJo8069MOU73htZmgH4OYy+S7f+ArXD7h8lTLT1niff2bCPi6eiAQq6b5CJ Ka4/27IiZo8tm1XjLYmoBmaCovqx5y5Xt2koibIWG3ZGD2I+qRwZ0UohKRH6kKVHGcrmCv0J YO8yIprxgoYmA7gq21BpTqw3D4+8xujn/6LgndLKmGESM1FuY3ymXgj5983eqaxicKpT9iq8 /a1j31tms4azR7+6Dt8H4SagfN6VbJ0luPzobrrNFxUgpjR4ZyQQ++G7oSRdwjfIh1wuCF6/ mDUNcb6/kA0JS9otiC3omfht47yQnvod+MxFk1lTNUu3hePJUwg1vT1te3vO5oln8lkUo9BU knlYpQ7QA2rDEKs+YWqUstr4pDtHzwQ6mo0rqP+zzsFNBGcrpvIBEADGYTFkNVttZkt6e7yA LNkv3Q39zQCt8qe7qkPdlj3CqygVXfw+h7GlcT9fuc4kd7YxFys4/Wd9icj9ZatGMwffONmi LnUotIq2N7+xvc4Xu76wv+QJpiuGEfCDB+VdZOmOzUPlmMkcJc/EDSH4qGogIYRu72uweKEq VfBI43PZIGpGJ7TjS3THX5WVI2YNSmuwqxnQF/iVqDtD2N72ObkBwIf9GnrOgxEyJ/SQq2R0 g7hd6IYk7SOKt1a8ZGCN6hXXKzmM6gHRC8fyWeTqJcK4BKSdX8PzEuYmAJjSfx4w6DoxdK5/ 9sVrNzaVgDHS0ThH/5kNkZ65KNR7K2nk45LT5Crjbg7w5/kKDY6/XiXDx7v/BOR/a+Ryo+lM MffN3XSnAex8cmIhNINl5Z8CAvDLUtItLcbDOv7hdXt6DSyb65CdyY8JwOt6CWno1tdjyDEG 5ANwVPYY878IFkOJLRTJuUd5ltybaSWjKIwjYJfIXuoyzE7OL63856MC/Os8PcLfY7vYY2LB cvKH1qOcs+an86DWX17+dkcKD/YLrpzwvRMur5+kTgVfXcC0TAl39N4YtaCKM/3ugAaVS1Mw MrbyGnGqVMqlCpjnpYREzapSk8XxbO2kYRsZQd8J9ei98OSqgPf8xM7NCULd/xaZLJUydql1 JdSREId2C15jut21aQARAQABwsF2BBgBCgAgFiEEO5YHwQksFRkI+NPdJGddkSfKF+wFAmcr pvICGwwACgkQJGddkSfKF+xuuxAA4F9iQc61wvAOAidktv4Rztn4QKy8TAyGN3M8zYf/A5Zx VcGgX4J4MhRUoPQNrzmVlrrtE2KILHxQZx5eQyPgixPXri42oG5ePEXZoLU5GFRYSPjjTYmP ypyTPN7uoWLfw4TxJqWCGRLsjnkwvyN3R4161Dty4Uhzqp1IkNhl3ifTDYEvbnmHaNvlvvna 7+9jjEBDEFYDMuO/CA8UtoVQXjy5gtOhZZkEsptfwQYc+E9U99yxGofDul7xH41VdXGpIhUj 4wjd3IbgaCiHxxj/M9eM99ybu5asvHyMo3EFPkyWxZsBlUN/riFXGspG4sT0cwOUhG2ZnExv XXhOGKs/y3VGhjZeCDWZ+0ZQHPCL3HUebLxW49wwLxvXU6sLNfYnTJxdqn58Aq4sBXW5Un0Q vfbd9VFV/bKFfvUscYk2UKPi9vgn1hY38IfmsnoS8b0uwDq75IBvup9pYFyNyPf5SutxhFfP JDjakbdjBoYDWVoaPbp5KAQ2VQRiR54lir/inyqGX+dwzPX/F4OHfB5RTiAFLJliCxniKFsM d8eHe88jWjm6/ilx4IlLl9/MdVUGjLpBi18X7ejLz3U2quYD8DBAGzCjy49wJ4Di4qQjblb2 pTXoEyM2L6E604NbDu0VDvHg7EXh1WwmijEu28c/hEB6DwtzslLpBSsJV0s1/jE= In-Reply-To: <20260704054342.GB2169894@pedri> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit On 7/4/26 08:43, Peter Fang wrote: > On Wed, Jul 01, 2026 at 11:45:53AM -0700, Edgecombe, Rick P wrote: >> On Wed, 2026-07-01 at 10:25 -0700, Sean Christopherson wrote: >>>>> That is a good question. The answer is partly historical reasons, but I >>>>> think the pros/cons don’t really move the needle too much. >>>>> >>>>> The main benefit of doing it with the host in the loop is that the guest >>>>> side TDVMCALL quoting interface can stay the same. There is also a wrinkle >>>>> in that there is a limited HW resource involved in the quoting, >>> >>> What is this magical resource? >> >> It's a HW crypto thing. I'll let Peter explain more. > > It's called S3M (Secured Startup Services). There was once a public > document about it, but it was removed for some reason. It basically Are you referring to this: https://www.scribd.com/document/970439243/S3M-Intel-White-Paper ?