1 // SPDX-License-Identifier: GPL-2.0
2 /*
3  * Test TDX guest features
4  *
5  * Copyright (C) 2022 Intel Corporation.
6  *
7  * Author: Kuppuswamy Sathyanarayanan <sathyanarayanan.kuppuswamy@linux.intel.com>
8  */
9 
10 #include <sys/ioctl.h>
11 
12 #include <errno.h>
13 #include <fcntl.h>
14 
15 #include <linux/tdx-guest.h>
16 #include "../kselftest_harness.h"
17 
18 #define TDX_GUEST_DEVNAME "/dev/tdx_guest"
19 #define HEX_DUMP_SIZE 8
20 #define DEBUG 0
21 
22 /**
23  * struct tdreport_type - Type header of TDREPORT_STRUCT.
24  * @type: Type of the TDREPORT (0 - SGX, 81 - TDX, rest are reserved)
25  * @sub_type: Subtype of the TDREPORT (Default value is 0).
26  * @version: TDREPORT version (Default value is 0).
27  * @reserved: Added for future extension.
28  *
29  * More details can be found in TDX v1.0 module specification, sec
30  * titled "REPORTTYPE".
31  */
32 struct tdreport_type {
33 	__u8 type;
34 	__u8 sub_type;
35 	__u8 version;
36 	__u8 reserved;
37 };
38 
39 /**
40  * struct reportmac - TDX guest report data, MAC and TEE hashes.
41  * @type: TDREPORT type header.
42  * @reserved1: Reserved for future extension.
43  * @cpu_svn: CPU security version.
44  * @tee_tcb_info_hash: SHA384 hash of TEE TCB INFO.
45  * @tee_td_info_hash: SHA384 hash of TDINFO_STRUCT.
46  * @reportdata: User defined unique data passed in TDG.MR.REPORT request.
47  * @reserved2: Reserved for future extension.
48  * @mac: CPU MAC ID.
49  *
50  * It is MAC-protected and contains hashes of the remainder of the
51  * report structure along with user provided report data. More details can
52  * be found in TDX v1.0 Module specification, sec titled "REPORTMACSTRUCT"
53  */
54 struct reportmac {
55 	struct tdreport_type type;
56 	__u8 reserved1[12];
57 	__u8 cpu_svn[16];
58 	__u8 tee_tcb_info_hash[48];
59 	__u8 tee_td_info_hash[48];
60 	__u8 reportdata[64];
61 	__u8 reserved2[32];
62 	__u8 mac[32];
63 };
64 
65 /**
66  * struct td_info - TDX guest measurements and configuration.
67  * @attr: TDX Guest attributes (like debug, spet_disable, etc).
68  * @xfam: Extended features allowed mask.
69  * @mrtd: Build time measurement register.
70  * @mrconfigid: Software-defined ID for non-owner-defined configuration
71  *              of the guest - e.g., run-time or OS configuration.
72  * @mrowner: Software-defined ID for the guest owner.
73  * @mrownerconfig: Software-defined ID for owner-defined configuration of
74  *                 the guest - e.g., specific to the workload.
75  * @rtmr: Run time measurement registers.
76  * @reserved: Added for future extension.
77  *
78  * It contains the measurements and initial configuration of the TDX guest
79  * that was locked at initialization and a set of measurement registers
80  * that are run-time extendable. More details can be found in TDX v1.0
81  * Module specification, sec titled "TDINFO_STRUCT".
82  */
83 struct td_info {
84 	__u8 attr[8];
85 	__u64 xfam;
86 	__u64 mrtd[6];
87 	__u64 mrconfigid[6];
88 	__u64 mrowner[6];
89 	__u64 mrownerconfig[6];
90 	__u64 rtmr[24];
91 	__u64 reserved[14];
92 };
93 
94 /*
95  * struct tdreport - Output of TDCALL[TDG.MR.REPORT].
96  * @reportmac: Mac protected header of size 256 bytes.
97  * @tee_tcb_info: Additional attestable elements in the TCB are not
98  *                reflected in the reportmac.
99  * @reserved: Added for future extension.
100  * @tdinfo: Measurements and configuration data of size 512 bytes.
101  *
102  * More details can be found in TDX v1.0 Module specification, sec
103  * titled "TDREPORT_STRUCT".
104  */
105 struct tdreport {
106 	struct reportmac reportmac;
107 	__u8 tee_tcb_info[239];
108 	__u8 reserved[17];
109 	struct td_info tdinfo;
110 };
111 
print_array_hex(const char * title,const char * prefix_str,const void * buf,int len)112 static void print_array_hex(const char *title, const char *prefix_str,
113 			    const void *buf, int len)
114 {
115 	int i, j, line_len, rowsize = HEX_DUMP_SIZE;
116 	const __u8 *ptr = buf;
117 
118 	printf("\t\t%s", title);
119 
120 	for (j = 0; j < len; j += rowsize) {
121 		line_len = rowsize < (len - j) ? rowsize : (len - j);
122 		printf("%s%.8x:", prefix_str, j);
123 		for (i = 0; i < line_len; i++)
124 			printf(" %.2x", ptr[j + i]);
125 		printf("\n");
126 	}
127 
128 	printf("\n");
129 }
130 
TEST(verify_report)131 TEST(verify_report)
132 {
133 	struct tdx_report_req req;
134 	struct tdreport *tdreport;
135 	int devfd, i;
136 
137 	devfd = open(TDX_GUEST_DEVNAME, O_RDWR | O_SYNC);
138 	ASSERT_LT(0, devfd);
139 
140 	/* Generate sample report data */
141 	for (i = 0; i < TDX_REPORTDATA_LEN; i++)
142 		req.reportdata[i] = i;
143 
144 	/* Get TDREPORT */
145 	ASSERT_EQ(0, ioctl(devfd, TDX_CMD_GET_REPORT0, &req));
146 
147 	if (DEBUG) {
148 		print_array_hex("\n\t\tTDX report data\n", "",
149 				req.reportdata, sizeof(req.reportdata));
150 
151 		print_array_hex("\n\t\tTDX tdreport data\n", "",
152 				req.tdreport, sizeof(req.tdreport));
153 	}
154 
155 	/* Make sure TDREPORT data includes the REPORTDATA passed */
156 	tdreport = (struct tdreport *)req.tdreport;
157 	ASSERT_EQ(0, memcmp(&tdreport->reportmac.reportdata[0],
158 			    req.reportdata, sizeof(req.reportdata)));
159 
160 	ASSERT_EQ(0, close(devfd));
161 }
162 
163 TEST_HARNESS_MAIN
164