1 // SPDX-License-Identifier: GPL-2.0
2 /*
3 * Test TDX guest features
4 *
5 * Copyright (C) 2022 Intel Corporation.
6 *
7 * Author: Kuppuswamy Sathyanarayanan <sathyanarayanan.kuppuswamy@linux.intel.com>
8 */
9
10 #include <sys/ioctl.h>
11
12 #include <errno.h>
13 #include <fcntl.h>
14
15 #include <linux/tdx-guest.h>
16 #include "../kselftest_harness.h"
17
18 #define TDX_GUEST_DEVNAME "/dev/tdx_guest"
19 #define HEX_DUMP_SIZE 8
20 #define DEBUG 0
21
22 /**
23 * struct tdreport_type - Type header of TDREPORT_STRUCT.
24 * @type: Type of the TDREPORT (0 - SGX, 81 - TDX, rest are reserved)
25 * @sub_type: Subtype of the TDREPORT (Default value is 0).
26 * @version: TDREPORT version (Default value is 0).
27 * @reserved: Added for future extension.
28 *
29 * More details can be found in TDX v1.0 module specification, sec
30 * titled "REPORTTYPE".
31 */
32 struct tdreport_type {
33 __u8 type;
34 __u8 sub_type;
35 __u8 version;
36 __u8 reserved;
37 };
38
39 /**
40 * struct reportmac - TDX guest report data, MAC and TEE hashes.
41 * @type: TDREPORT type header.
42 * @reserved1: Reserved for future extension.
43 * @cpu_svn: CPU security version.
44 * @tee_tcb_info_hash: SHA384 hash of TEE TCB INFO.
45 * @tee_td_info_hash: SHA384 hash of TDINFO_STRUCT.
46 * @reportdata: User defined unique data passed in TDG.MR.REPORT request.
47 * @reserved2: Reserved for future extension.
48 * @mac: CPU MAC ID.
49 *
50 * It is MAC-protected and contains hashes of the remainder of the
51 * report structure along with user provided report data. More details can
52 * be found in TDX v1.0 Module specification, sec titled "REPORTMACSTRUCT"
53 */
54 struct reportmac {
55 struct tdreport_type type;
56 __u8 reserved1[12];
57 __u8 cpu_svn[16];
58 __u8 tee_tcb_info_hash[48];
59 __u8 tee_td_info_hash[48];
60 __u8 reportdata[64];
61 __u8 reserved2[32];
62 __u8 mac[32];
63 };
64
65 /**
66 * struct td_info - TDX guest measurements and configuration.
67 * @attr: TDX Guest attributes (like debug, spet_disable, etc).
68 * @xfam: Extended features allowed mask.
69 * @mrtd: Build time measurement register.
70 * @mrconfigid: Software-defined ID for non-owner-defined configuration
71 * of the guest - e.g., run-time or OS configuration.
72 * @mrowner: Software-defined ID for the guest owner.
73 * @mrownerconfig: Software-defined ID for owner-defined configuration of
74 * the guest - e.g., specific to the workload.
75 * @rtmr: Run time measurement registers.
76 * @reserved: Added for future extension.
77 *
78 * It contains the measurements and initial configuration of the TDX guest
79 * that was locked at initialization and a set of measurement registers
80 * that are run-time extendable. More details can be found in TDX v1.0
81 * Module specification, sec titled "TDINFO_STRUCT".
82 */
83 struct td_info {
84 __u8 attr[8];
85 __u64 xfam;
86 __u64 mrtd[6];
87 __u64 mrconfigid[6];
88 __u64 mrowner[6];
89 __u64 mrownerconfig[6];
90 __u64 rtmr[24];
91 __u64 reserved[14];
92 };
93
94 /*
95 * struct tdreport - Output of TDCALL[TDG.MR.REPORT].
96 * @reportmac: Mac protected header of size 256 bytes.
97 * @tee_tcb_info: Additional attestable elements in the TCB are not
98 * reflected in the reportmac.
99 * @reserved: Added for future extension.
100 * @tdinfo: Measurements and configuration data of size 512 bytes.
101 *
102 * More details can be found in TDX v1.0 Module specification, sec
103 * titled "TDREPORT_STRUCT".
104 */
105 struct tdreport {
106 struct reportmac reportmac;
107 __u8 tee_tcb_info[239];
108 __u8 reserved[17];
109 struct td_info tdinfo;
110 };
111
112 static void print_array_hex(const char *title, const char *prefix_str,
113 const void *buf, int len)
114 {
115 int i, j, line_len, rowsize = HEX_DUMP_SIZE;
116 const __u8 *ptr = buf;
117
118 printf("\t\t%s", title);
119
120 for (j = 0; j < len; j += rowsize) {
121 line_len = rowsize < (len - j) ? rowsize : (len - j);
122 printf("%s%.8x:", prefix_str, j);
123 for (i = 0; i < line_len; i++)
124 printf(" %.2x", ptr[j + i]);
125 printf("\n");
126 }
127
128 printf("\n");
129 }
130
131 TEST(verify_report)
132 {
133 struct tdx_report_req req;
134 struct tdreport *tdreport;
135 int devfd, i;
136
137 devfd = open(TDX_GUEST_DEVNAME, O_RDWR | O_SYNC);
138 ASSERT_LT(0, devfd);
139
140 /* Generate sample report data */
141 for (i = 0; i < TDX_REPORTDATA_LEN; i++)
142 req.reportdata[i] = i;
143
144 /* Get TDREPORT */
145 ASSERT_EQ(0, ioctl(devfd, TDX_CMD_GET_REPORT0, &req));
146
147 if (DEBUG) {
148 print_array_hex("\n\t\tTDX report data\n", "",
149 req.reportdata, sizeof(req.reportdata));
150
151 print_array_hex("\n\t\tTDX tdreport data\n", "",
152 req.tdreport, sizeof(req.tdreport));
153 }
154
155 /* Make sure TDREPORT data includes the REPORTDATA passed */
156 tdreport = (struct tdreport *)req.tdreport;
157 ASSERT_EQ(0, memcmp(&tdreport->reportmac.reportdata[0],
158 req.reportdata, sizeof(req.reportdata)));
159
160 ASSERT_EQ(0, close(devfd));
161 }
162
163 TEST_HARNESS_MAIN
164
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.