From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from NAM10-MW2-obe.outbound.protection.outlook.com (NAM10-MW2-obe.outbound.protection.outlook.com [40.107.94.79]) by mx.groups.io with SMTP id smtpd.web10.874.1631557202199811456 for ; Mon, 13 Sep 2021 11:20:04 -0700 Authentication-Results: mx.groups.io; dkim=fail reason="body hash did not verify" header.i=@amd.com header.s=selector1 header.b=22e1fG8j; spf=permerror, err=parse error for token &{10 18 %{i}._ip.%{h}._ehlo.%{d}._spf.vali.email}: invalid domain name (domain: amd.com, ip: 40.107.94.79, mailfrom: brijesh.singh@amd.com) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Un+fjoRQNAoBx6g2BtvttrDIMHbFHeCFEfNDnpt8uFtRqabEgI2Xyo121gzS6hFdaSPSHCbPFR3otXzQdC83L1n2C+FFL+6aArmloa0LF0ze3WJDpyW7BeuRXkFS+JOluXrdJp87Rkka95+rp8ddharW7NJUWrBzER4yEVaoKCxoUdSJ13ejrTe/tFStu8R1AXYtk81izWegF02tVbnY4hcJGFRnTk8qEfcbs91YcgtxdF+ru0mgmzQRptIou3NNPZ882yR3NJxWDFAtRY1ImDMgA+LWlswNnzgCC+hiaVNoB2wVDwqyOUHzsq5vHHQgfNjxVkKUYVD6hAOmE5dqcQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=eaGSfAN7Ef44FsTt6F0mg+KnUYXA2hoN7zglFnaSTiw=; b=TisPLIBGhgkBNtmKgbaNrgER/SilvpgSvF/dDIvldM7UJ5q48gjmbXRYwbRKnvy2sLb1rfSxAORMqZgnXyr5X0gMM3li1YICp0/SHALORyHSaIGK2ASRs88DPTDncKysPh0znbOvT4gItpfuVyJvvWlY8wcUSAQH4MwrtHr/b4EwPupR8zC5D5QQ72Er2g2F+4AGhxpBlrNDfzeJAgpmup26ovPfeMsWy57MZ7OBs3saoJeszydEiA1IPLhXLMIPvcbyxvpvQcMfcb5Z4pzG033h94xuaKbVh2PRNW6gC4ScSf/Spvr4ag5E6VJi6iSf5CdO/4TJlh7t011nhFp7tw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=amd.com; dmarc=pass action=none header.from=amd.com; dkim=pass header.d=amd.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=amd.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=eaGSfAN7Ef44FsTt6F0mg+KnUYXA2hoN7zglFnaSTiw=; b=22e1fG8jpV7tYkr/U+uI9oUDSuLyUU5ZoNAEncT5ucTWbmiXfkG+XjWLAyiA00H5TnCBBXWa6Y12xQSRDw98vWeO2zIiOeHnqBmgHhDxSnzTmeKDldtS9xhNSF2xMGk4Cck+ZilBW7KrAnd+0zCZPlLoTuiU3mIREsdAb7gsHEU= Authentication-Results: edk2.groups.io; dkim=none (message not signed) header.d=none;edk2.groups.io; dmarc=none action=none header.from=amd.com; Received: from SN6PR12MB2718.namprd12.prod.outlook.com (2603:10b6:805:6f::22) by SN1PR12MB2512.namprd12.prod.outlook.com (2603:10b6:802:31::14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4500.14; Mon, 13 Sep 2021 18:20:03 +0000 Received: from SN6PR12MB2718.namprd12.prod.outlook.com ([fe80::78b7:7336:d363:9be3]) by SN6PR12MB2718.namprd12.prod.outlook.com ([fe80::78b7:7336:d363:9be3%6]) with mapi id 15.20.4500.019; Mon, 13 Sep 2021 18:20:03 +0000 From: "Brijesh Singh" To: devel@edk2.groups.io CC: James Bottomley , Min Xu , Jiewen Yao , Tom Lendacky , Jordan Justen , Ard Biesheuvel , Erdem Aktas , Michael Roth , Gerd Hoffmann , Brijesh Singh , Michael Roth Subject: [PATCH v7 06/31] OvmfPkg/ResetVector: pre-validate the data pages used in SEC phase Date: Mon, 13 Sep 2021 13:19:16 -0500 Message-ID: <20210913181941.23405-7-brijesh.singh@amd.com> X-Mailer: git-send-email 2.17.1 In-Reply-To: <20210913181941.23405-1-brijesh.singh@amd.com> References: <20210913181941.23405-1-brijesh.singh@amd.com> X-ClientProxiedBy: SA9P221CA0012.NAMP221.PROD.OUTLOOK.COM (2603:10b6:806:25::17) To SN6PR12MB2718.namprd12.prod.outlook.com (2603:10b6:805:6f::22) Return-Path: brijesh.singh@amd.com MIME-Version: 1.0 Received: from sbrijesh-desktop.amd.com (165.204.77.1) by SA9P221CA0012.NAMP221.PROD.OUTLOOK.COM (2603:10b6:806:25::17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4500.14 via Frontend Transport; Mon, 13 Sep 2021 18:20:02 +0000 X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: ce6a87df-005f-4891-4c4d-08d976e31ac7 X-MS-TrafficTypeDiagnostic: SN1PR12MB2512: X-MS-Exchange-Transport-Forked: True X-Microsoft-Antispam-PRVS: X-MS-Oob-TLC-OOBClassifiers: OLM:9508; X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:SN6PR12MB2718.namprd12.prod.outlook.com;PTR:;CAT:NONE;SFS:(4636009)(396003)(346002)(39860400002)(366004)(376002)(136003)(83380400001)(478600001)(86362001)(8936002)(966005)(6486002)(8676002)(186003)(6916009)(2906002)(15650500001)(38350700002)(38100700002)(26005)(36756003)(19627235002)(956004)(2616005)(66946007)(6666004)(66556008)(54906003)(5660300002)(52116002)(44832011)(66476007)(316002)(4326008)(1076003)(7696005);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?bmqE2b1xBIroTYuzIq30b56FVxYBDsE4BElqSTohS6LT0WWh+7ZmT0R9wqPV?= =?us-ascii?Q?xpdVpufJ3dlbgXhveqdCfTd2OUYGKg/2cmdJChGm6kkKPyOVwMvKPIpiT2/7?= =?us-ascii?Q?NQDpGKV7d+0YQGsa1ETNg2hPsIeN27jhwh1i3BTvio6AxpGofOzfpMPL9m5Y?= =?us-ascii?Q?uUftxejO96SnfXETho0os7pjyY3hSuUwSv9dNv7hjUkfVcGam+B78FnEqugx?= =?us-ascii?Q?mL8HV46pl8jZmZUwYgp5immtpLXZrcZz5Wwn0Cx8ZGfuYXqUP2S+BLmpSykK?= =?us-ascii?Q?Qzr/rXyeS3RrGGuRq/MIU/4efVk18NSX1ivBUjCPPkjpBL1qmeAhQszuaMYv?= =?us-ascii?Q?B4KkmcQI99iv7PMtqbNWByGWMiSRB8RCtb7KnrkY0qAXeZVFtnJE4x+JhuLO?= =?us-ascii?Q?XM5RwYCIJ8psB0bIdVCy4D6l+Xko+9PJBN/kvPT8xr1wUVbGsbTA+0siOsuM?= =?us-ascii?Q?PEPy0+6ts/nCBxZyTe99P8+fd6FK2ikrPa8uYZ9PdJfgNSBQkHmKKAKku9/b?= =?us-ascii?Q?hKKdEAwr8B90MLobADV0YitbYVGEXaCijdUdYsgcmiRvGcYCr3gt/6DJYpGK?= =?us-ascii?Q?WyrR3bmyH6KfYPaKuO4nKqQSrWEJdIua90XDP9ZMilfM3+dCwitS5OiETfli?= =?us-ascii?Q?48fO3nLb1UHiJ1DwOAPMsIA/AFctILZg2mzCjTVjA17oHU1331iv+Sj4w4Ti?= =?us-ascii?Q?+OIrji2X2iJd8T1TBYqNZOlAaVwjxffuhewomttdWc9VwNDJVOR64Ixz8P8l?= =?us-ascii?Q?U/Vk5ryGwJCTmx2MWgFVB4kYDOKpvTAV4Ofi7kgSofuLr37ZGh5U3KRDiNFA?= =?us-ascii?Q?XjVvLEKJn5FG8mLLXjUTiW99//ywKs3M9E0C2TTxauO8pLohuBBG3HdFK0ZR?= =?us-ascii?Q?ZPb5x14LLwb7ssaQwwx6RwaMOg1HKWuBA56jo9hk4eoSQa9OXXY28RyzUeXc?= =?us-ascii?Q?0TxV5aRw0mC3M9xWCBpz1GqWiXuK//rXHvb2EvetS8k5PhdKAYSmPl2pzli1?= =?us-ascii?Q?S7kO9WFlcVLTLD6lhaqGubYsnSaXVXwflRjv7nnFpZI+APALWBWM/zypJlvO?= =?us-ascii?Q?l03IQpBX9ptoEobLzbxkfMt/jAJUvE81Rm/ZbT2Yl/d+dqS/vBP/2Fog6nQb?= =?us-ascii?Q?Qw5jZXPBqhkh+GhM7/cn+sHI+JvI/0AZ3qj4i5iSZEbhQIwwXrf2gLSOljmK?= =?us-ascii?Q?o64VrBFWZZfJD+YOk2MCVPs+WC1B7bDAD1O3/3QW/R2S0iZvbFu2RUlhFVes?= =?us-ascii?Q?i/MNPrGIujUg3jdy9xaEl0AE5FrCVBhYngfJe5e01NnwofTz2J85eOaGptlo?= =?us-ascii?Q?kyjjSC+TJNSLbr716X3DGN0U?= X-OriginatorOrg: amd.com X-MS-Exchange-CrossTenant-Network-Message-Id: ce6a87df-005f-4891-4c4d-08d976e31ac7 X-MS-Exchange-CrossTenant-AuthSource: SN6PR12MB2718.namprd12.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 13 Sep 2021 18:20:03.0397 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 3dd8961f-e488-4e60-8e11-a82d994e183d X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: TOJ4fjDovDnpF0eLZ6N9sP8+6j8DdIsrOFGdiS7KWqvF0cPmZVhanwzOeWMdr1nk9UI70K6Bt33jtFlkAW2NAg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN1PR12MB2512 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=3D3275 An SEV-SNP guest requires that private memory (aka pages mapped encrypted) must be validated before being accessed. The validation process consist of the following sequence: 1) Set the memory encryption attribute in the page table (aka C-bit). Note: If the processor is in non-PAE mode, then all the memory accesses are considered private. 2) Add the memory range as private in the RMP table. This can be performed using the Page State Change VMGEXIT defined in the GHCB specification. 3) Use the PVALIDATE instruction to set the Validated Bit in the RMP table. During the guest creation time, the VMM encrypts the OVMF_CODE.fd using the SEV-SNP firmware provided LAUNCH_UPDATE_DATA command. In addition to encrypting the content, the command also validates the memory region. This allows us to execute the code without going through the validation sequence. During execution, the reset vector need to access some data pages (such as page tables, SevESWorkarea, Sec stack). The data pages are accessed as private memory. The data pages are not part of the OVMF_CODE.fd, so they were not validated during the guest creation. There are two approaches we can take to validate the data pages before the access: a) Enhance the OVMF reset vector code to validate the pages as described above (go through step 2 - 3). OR b) Validate the pages during the guest creation time. The SEV firmware provides a command which can be used by the VMM to validate the pages without affecting the measurement of the launch. Approach #b seems much simpler; it does not require any changes to the OVMF reset vector code. Update the OVMF metadata with the list of regions that must be pre-validated by the VMM before the boot. Cc: Michael Roth Cc: James Bottomley Cc: Min Xu Cc: Jiewen Yao Cc: Tom Lendacky Cc: Jordan Justen Cc: Ard Biesheuvel Cc: Erdem Aktas Cc: Gerd Hoffmann Signed-off-by: Brijesh Singh --- OvmfPkg/ResetVector/ResetVector.inf | 7 ++++ OvmfPkg/ResetVector/ResetVector.nasmb | 29 ++++++++++++++ OvmfPkg/ResetVector/X64/OvmfMetadata.asm | 48 ++++++++++++++++++++++++ 3 files changed, 84 insertions(+) diff --git a/OvmfPkg/ResetVector/ResetVector.inf b/OvmfPkg/ResetVector/Rese= tVector.inf index 4cb81a3233f0..af3cf610a2cd 100644 --- a/OvmfPkg/ResetVector/ResetVector.inf +++ b/OvmfPkg/ResetVector/ResetVector.inf @@ -37,6 +37,8 @@ [Pcd] gUefiCpuPkgTokenSpaceGuid.PcdSevEsWorkAreaBase gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecGhcbBase gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecGhcbSize + gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecGhcbBackupBase + gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecGhcbBackupSize gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecGhcbPageTableBase gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecGhcbPageTableSize gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecPageTablesBase @@ -44,6 +46,11 @@ [Pcd] gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecPeiTempRamBase gUefiOvmfPkgTokenSpaceGuid.PcdOvmfSecPeiTempRamSize gUefiOvmfPkgTokenSpaceGuid.PcdOvmfWorkAreaBase + gUefiOvmfPkgTokenSpaceGuid.PcdOvmfWorkAreaSize + gUefiOvmfPkgTokenSpaceGuid.PcdOvmfLockBoxStorageBase + gUefiOvmfPkgTokenSpaceGuid.PcdOvmfLockBoxStorageSize + gEfiMdePkgTokenSpaceGuid.PcdGuidedExtractHandlerTableAddress + gUefiOvmfPkgTokenSpaceGuid.PcdGuidedExtractHandlerTableSize =20 [FixedPcd] gUefiOvmfPkgTokenSpaceGuid.PcdOvmfCpuidBase diff --git a/OvmfPkg/ResetVector/ResetVector.nasmb b/OvmfPkg/ResetVector/Re= setVector.nasmb index 84cb5ae81b66..e05e202def1e 100644 --- a/OvmfPkg/ResetVector/ResetVector.nasmb +++ b/OvmfPkg/ResetVector/ResetVector.nasmb @@ -70,6 +70,7 @@ %define PT_ADDR(Offset) (FixedPcdGet32 (PcdOvmfSecPageTablesBase) + (Off= set)) =20 %define GHCB_PT_ADDR (FixedPcdGet32 (PcdOvmfSecGhcbPageTableBase)) + %define GHCB_PT_SIZE (FixedPcdGet32 (PcdOvmfSecGhcbPageTableSize)) %define GHCB_BASE (FixedPcdGet32 (PcdOvmfSecGhcbBase)) %define GHCB_SIZE (FixedPcdGet32 (PcdOvmfSecGhcbSize)) %define WORK_AREA_GUEST_TYPE (FixedPcdGet32 (PcdOvmfWorkAreaBase)) @@ -81,6 +82,34 @@ %define SEV_SNP_SECRETS_SIZE (FixedPcdGet32 (PcdOvmfSnpSecretsSize)) %define CPUID_BASE (FixedPcdGet32 (PcdOvmfCpuidBase)) %define CPUID_SIZE (FixedPcdGet32 (PcdOvmfCpuidSize)) + %define SEC_PAGE_TABLE_BASE (FixedPcdGet32 (PcdOvmfSecPageTablesBase)) + %define SEC_PAGE_TABLE_SIZE (FixedPcdGet32 (PcdOvmfSecPageTablesSize)) + %define LOCK_BOX_STORAGE_BASE (FixedPcdGet32 (PcdOvmfLockBoxStorageBase)= ) + %define LOCK_BOX_STORAGE_SIZE (FixedPcdGet32 (PcdOvmfLockBoxStorageSize)= ) + ; + ; The PcdGuidedExtractHandlerTableAddress is a 64-bit PCD. The FixedPcdG= et64() returns + ; a number suffix with 'ULL' (e.g 0x1111ULL). NASM does not like the con= stant ending + ; with anything other than 'h'. So, instead of using the FixedPcdGet64()= , calculate + ; the base address of GuidedExtractHandlerTableBase + ; + %define GUID_EXTRACT_HANDLER_TABLE_BASE (LOCK_BOX_STORAGE_BASE + LOCK_BO= X_STORAGE_SIZE) + %define GUID_EXTRACT_HANDLER_TABLE_SIZE (FixedPcdGet32 (PcdGuidedExtract= HandlerTableSize)) + %define WORK_AREA_BASE (FixedPcdGet32 (PcdOvmfWorkAreaBase)) + %define WORK_AREA_SIZE (FixedPcdGet32 (PcdOvmfWorkAreaSize)) + %define SEC_PEI_TEMP_RAM_BASE (FixedPcdGet32 (PcdOvmfSecPeiTempRamBase)) + %define SEC_PEI_TEMP_RAM_SIZE (FixedPcdGet32 (PcdOvmfSecPeiTempRamSize)) + + ; + ; The PcdOvmfSecGhcbBase reserves two GHCB pages. The first page is used + ; as GHCB shared page and second is used for booking to support the + ; nested GHCB in SEC phase. The booking page is mapped private. The VMM + ; does not need to validate the shared page but it need to validate the + ; booking page + ; + %define GHCB_SEC_BACKUP_BASE (FixedPcdGet32 (PcdOvmfSecGhcbBackupBase)) + %define GHCB_SEC_BACKUP_SIZE (FixedPcdGet32 (PcdOvmfSecGhcbBackupSize)) + %define GHCB_BOOKKEEPING_BASE (GHCB_BASE + 0x1000) + %define GHCB_BOOKKEEPING_SIZE (GHCB_SIZE - 0x1000) =20 %include "Ia32/Flat32ToFlat64.asm" %include "Ia32/AmdSev.asm" diff --git a/OvmfPkg/ResetVector/X64/OvmfMetadata.asm b/OvmfPkg/ResetVector= /X64/OvmfMetadata.asm index 95bac86a3b95..657d6c298d4e 100644 --- a/OvmfPkg/ResetVector/X64/OvmfMetadata.asm +++ b/OvmfPkg/ResetVector/X64/OvmfMetadata.asm @@ -49,6 +49,48 @@ _Descriptor: DD OVMF_METADATA_VERSION ; Version DD (OvmfGuidedStructureEnd - _Descriptor - 16) / 12 ; Number of sections =20 +; Page table used during SEC +SecPageTable: + DD SEC_PAGE_TABLE_BASE + DD SEC_PAGE_TABLE_SIZE + DD OVMF_SECTION_TYPE_SEC_MEM + +; Lockbox storage +LockBoxStorage: + DD LOCK_BOX_STORAGE_BASE + DD LOCK_BOX_STORAGE_SIZE + DD OVMF_SECTION_TYPE_SEC_MEM + +; Guided Extract Handler Table +ExtractHandlerTable: + DD GUID_EXTRACT_HANDLER_TABLE_BASE + DD GUID_EXTRACT_HANDLER_TABLE_SIZE + DD OVMF_SECTION_TYPE_SEC_MEM + +; GHCB page table +GhcbPageTable: + DD GHCB_PT_ADDR + DD GHCB_PT_SIZE + DD OVMF_SECTION_TYPE_SEC_MEM + +; GHCB bookkeeping page used in SEC phase +GhcbBookkeeping: + DD GHCB_BOOKKEEPING_BASE + DD GHCB_BOOKKEEPING_SIZE + DD OVMF_SECTION_TYPE_SEC_MEM + +; Confidential computing work area +WorkArea: + DD WORK_AREA_BASE + DD WORK_AREA_SIZE + DD OVMF_SECTION_TYPE_SEC_MEM + +; GHCB backup page used in SEC +GhcbBackup: + DD GHCB_SEC_BACKUP_BASE + DD GHCB_SEC_BACKUP_SIZE + DD OVMF_SECTION_TYPE_SEC_MEM + ; SEV-SNP Secrets page SevSnpSecrets: DD SEV_SNP_SECRETS_BASE @@ -61,5 +103,11 @@ CpuidSec: DD CPUID_SIZE DD OVMF_SECTION_TYPE_CPUID =20 +; Temporary RAM used in SEC phase +SecPeiTempRam: + DD SEC_PEI_TEMP_RAM_BASE + DD SEC_PEI_TEMP_RAM_SIZE + DD OVMF_SECTION_TYPE_SEC_MEM + OvmfGuidedStructureEnd: ALIGN 16 --=20 2.17.1