1 /* SPDX-License-Identifier: GPL-2.0-only WITH 1 /* SPDX-License-Identifier: GPL-2.0-only WITH Linux-syscall-note */
2 /* 2 /*
3 * Userspace interface for AMD SEV and SNP gue 3 * Userspace interface for AMD SEV and SNP guest driver.
4 * 4 *
5 * Copyright (C) 2021 Advanced Micro Devices, 5 * Copyright (C) 2021 Advanced Micro Devices, Inc.
6 * 6 *
7 * Author: Brijesh Singh <brijesh.singh@amd.co 7 * Author: Brijesh Singh <brijesh.singh@amd.com>
8 * 8 *
9 * SEV API specification is available at: http 9 * SEV API specification is available at: https://developer.amd.com/sev/
10 */ 10 */
11 11
12 #ifndef __UAPI_LINUX_SEV_GUEST_H_ 12 #ifndef __UAPI_LINUX_SEV_GUEST_H_
13 #define __UAPI_LINUX_SEV_GUEST_H_ 13 #define __UAPI_LINUX_SEV_GUEST_H_
14 14
15 #include <linux/types.h> 15 #include <linux/types.h>
16 16
17 #define SNP_REPORT_USER_DATA_SIZE 64 <<
18 <<
19 struct snp_report_req { 17 struct snp_report_req {
20 /* user data that should be included i 18 /* user data that should be included in the report */
21 __u8 user_data[SNP_REPORT_USER_DATA_SI !! 19 __u8 user_data[64];
22 20
23 /* The vmpl level to be included in th 21 /* The vmpl level to be included in the report */
24 __u32 vmpl; 22 __u32 vmpl;
25 23
26 /* Must be zero filled */ 24 /* Must be zero filled */
27 __u8 rsvd[28]; 25 __u8 rsvd[28];
28 }; 26 };
29 27
30 struct snp_report_resp { 28 struct snp_report_resp {
31 /* response data, see SEV-SNP spec for 29 /* response data, see SEV-SNP spec for the format */
32 __u8 data[4000]; 30 __u8 data[4000];
33 }; 31 };
34 32
35 struct snp_derived_key_req { 33 struct snp_derived_key_req {
36 __u32 root_key_select; 34 __u32 root_key_select;
37 __u32 rsvd; 35 __u32 rsvd;
38 __u64 guest_field_select; 36 __u64 guest_field_select;
39 __u32 vmpl; 37 __u32 vmpl;
40 __u32 guest_svn; 38 __u32 guest_svn;
41 __u64 tcb_version; 39 __u64 tcb_version;
42 }; 40 };
43 41
44 struct snp_derived_key_resp { 42 struct snp_derived_key_resp {
45 /* response data, see SEV-SNP spec for 43 /* response data, see SEV-SNP spec for the format */
46 __u8 data[64]; 44 __u8 data[64];
47 }; 45 };
48 46
49 struct snp_guest_request_ioctl { 47 struct snp_guest_request_ioctl {
50 /* message version number (must be non 48 /* message version number (must be non-zero) */
51 __u8 msg_version; 49 __u8 msg_version;
52 50
53 /* Request and response structure addr 51 /* Request and response structure address */
54 __u64 req_data; 52 __u64 req_data;
55 __u64 resp_data; 53 __u64 resp_data;
56 54
57 /* bits[63:32]: VMM error code, bits[3 55 /* bits[63:32]: VMM error code, bits[31:0] firmware error code (see psp-sev.h) */
58 union { 56 union {
59 __u64 exitinfo2; 57 __u64 exitinfo2;
60 struct { 58 struct {
61 __u32 fw_error; 59 __u32 fw_error;
62 __u32 vmm_error; 60 __u32 vmm_error;
63 }; 61 };
64 }; 62 };
65 }; 63 };
66 64
67 struct snp_ext_report_req { 65 struct snp_ext_report_req {
68 struct snp_report_req data; 66 struct snp_report_req data;
69 67
70 /* where to copy the certificate blob 68 /* where to copy the certificate blob */
71 __u64 certs_address; 69 __u64 certs_address;
72 70
73 /* length of the certificate blob */ 71 /* length of the certificate blob */
74 __u32 certs_len; 72 __u32 certs_len;
75 }; 73 };
76 74
77 #define SNP_GUEST_REQ_IOC_TYPE 'S' 75 #define SNP_GUEST_REQ_IOC_TYPE 'S'
78 76
79 /* Get SNP attestation report */ 77 /* Get SNP attestation report */
80 #define SNP_GET_REPORT _IOWR(SNP_GUEST_REQ_IOC 78 #define SNP_GET_REPORT _IOWR(SNP_GUEST_REQ_IOC_TYPE, 0x0, struct snp_guest_request_ioctl)
81 79
82 /* Get a derived key from the root */ 80 /* Get a derived key from the root */
83 #define SNP_GET_DERIVED_KEY _IOWR(SNP_GUEST_RE 81 #define SNP_GET_DERIVED_KEY _IOWR(SNP_GUEST_REQ_IOC_TYPE, 0x1, struct snp_guest_request_ioctl)
84 82
85 /* Get SNP extended report as defined in the G 83 /* Get SNP extended report as defined in the GHCB specification version 2. */
86 #define SNP_GET_EXT_REPORT _IOWR(SNP_GUEST_REQ 84 #define SNP_GET_EXT_REPORT _IOWR(SNP_GUEST_REQ_IOC_TYPE, 0x2, struct snp_guest_request_ioctl)
87 85
88 /* Guest message request EXIT_INFO_2 constants 86 /* Guest message request EXIT_INFO_2 constants */
89 #define SNP_GUEST_FW_ERR_MASK GENMAS 87 #define SNP_GUEST_FW_ERR_MASK GENMASK_ULL(31, 0)
90 #define SNP_GUEST_VMM_ERR_SHIFT 32 88 #define SNP_GUEST_VMM_ERR_SHIFT 32
91 #define SNP_GUEST_VMM_ERR(x) (((u64 89 #define SNP_GUEST_VMM_ERR(x) (((u64)x) << SNP_GUEST_VMM_ERR_SHIFT)
92 #define SNP_GUEST_FW_ERR(x) ((x) & <<
93 #define SNP_GUEST_ERR(vmm_err, fw_err) (SNP_G <<
94 SNP_G <<
95 90
96 #define SNP_GUEST_VMM_ERR_INVALID_LEN 1 91 #define SNP_GUEST_VMM_ERR_INVALID_LEN 1
97 #define SNP_GUEST_VMM_ERR_BUSY 2 92 #define SNP_GUEST_VMM_ERR_BUSY 2
98 93
99 #endif /* __UAPI_LINUX_SEV_GUEST_H_ */ 94 #endif /* __UAPI_LINUX_SEV_GUEST_H_ */
100 95
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.