c6d26d3707
SGX enclave pages are inaccessible to normal software. They must be populated with data by copying from normal memory with the help of the EADD and EEXTEND functions of the ENCLS instruction. Add an ioctl() which performs EADD that adds new data to an enclave, and optionally EEXTEND functions that hash the page contents and use the hash as part of enclave “measurement” to ensure enclave integrity. The enclave author gets to decide which pages will be included in the enclave measurement with EEXTEND. Measurement is very slow and has sometimes has very little value. For instance, an enclave _could_ measure every page of data and code, but would be slow to initialize. Or, it might just measure its code and then trust that code to initialize the bulk of its data after it starts running. Co-developed-by: Sean Christopherson <sean.j.christopherson@intel.com> Signed-off-by: Sean Christopherson <sean.j.christopherson@intel.com> Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Borislav Petkov <bp@suse.de> Tested-by: Jethro Beekman <jethro@fortanix.com> Link: https://lkml.kernel.org/r/20201112220135.165028-14-jarkko@kernel.org
65 lines
1.6 KiB
C
65 lines
1.6 KiB
C
/* SPDX-License-Identifier: GPL-2.0 */
|
|
#ifndef _X86_SGX_H
|
|
#define _X86_SGX_H
|
|
|
|
#include <linux/bitops.h>
|
|
#include <linux/err.h>
|
|
#include <linux/io.h>
|
|
#include <linux/rwsem.h>
|
|
#include <linux/types.h>
|
|
#include <asm/asm.h>
|
|
#include "arch.h"
|
|
|
|
#undef pr_fmt
|
|
#define pr_fmt(fmt) "sgx: " fmt
|
|
|
|
#define SGX_MAX_EPC_SECTIONS 8
|
|
#define SGX_EEXTEND_BLOCK_SIZE 256
|
|
|
|
struct sgx_epc_page {
|
|
unsigned int section;
|
|
struct list_head list;
|
|
};
|
|
|
|
/*
|
|
* The firmware can define multiple chunks of EPC to the different areas of the
|
|
* physical memory e.g. for memory areas of the each node. This structure is
|
|
* used to store EPC pages for one EPC section and virtual memory area where
|
|
* the pages have been mapped.
|
|
*/
|
|
struct sgx_epc_section {
|
|
unsigned long phys_addr;
|
|
void *virt_addr;
|
|
struct list_head page_list;
|
|
struct list_head laundry_list;
|
|
struct sgx_epc_page *pages;
|
|
spinlock_t lock;
|
|
};
|
|
|
|
extern struct sgx_epc_section sgx_epc_sections[SGX_MAX_EPC_SECTIONS];
|
|
|
|
static inline unsigned long sgx_get_epc_phys_addr(struct sgx_epc_page *page)
|
|
{
|
|
struct sgx_epc_section *section = &sgx_epc_sections[page->section];
|
|
unsigned long index;
|
|
|
|
index = ((unsigned long)page - (unsigned long)section->pages) / sizeof(*page);
|
|
|
|
return section->phys_addr + index * PAGE_SIZE;
|
|
}
|
|
|
|
static inline void *sgx_get_epc_virt_addr(struct sgx_epc_page *page)
|
|
{
|
|
struct sgx_epc_section *section = &sgx_epc_sections[page->section];
|
|
unsigned long index;
|
|
|
|
index = ((unsigned long)page - (unsigned long)section->pages) / sizeof(*page);
|
|
|
|
return section->virt_addr + index * PAGE_SIZE;
|
|
}
|
|
|
|
struct sgx_epc_page *__sgx_alloc_epc_page(void);
|
|
void sgx_free_epc_page(struct sgx_epc_page *page);
|
|
|
|
#endif /* _X86_SGX_H */
|