<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 08/13/2015 08:22 PM, Stefan Berger
wrote:<br>
</div>
<blockquote
cite="mid:OFFC2FA4C6.CD60EFE8-ON85257EA1.00018BA0-85257EA1.00020DE0@us.ibm.com"
type="cite"><tt><font size="2">David Gibson
<a class="moz-txt-link-rfc2396E" href="mailto:david@gibson.dropbear.id.au"><david@gibson.dropbear.id.au></a> wrote
on 08/11/2015 10:13:45 PM:<br>
<br>
> From: David Gibson <a class="moz-txt-link-rfc2396E" href="mailto:david@gibson.dropbear.id.au"><david@gibson.dropbear.id.au></a></font></tt>
<br>
<tt><font size="2">> To: Stefan Berger
<a class="moz-txt-link-rfc2396E" href="mailto:stefanb@linux.vnet.ibm.com"><stefanb@linux.vnet.ibm.com></a></font></tt>
<br>
<tt><font size="2">> Cc: <a class="moz-txt-link-abbreviated" href="mailto:slof@lists.ozlabs.org">slof@lists.ozlabs.org</a>,
<a class="moz-txt-link-abbreviated" href="mailto:nikunj@linux.vnet.ibm.com">nikunj@linux.vnet.ibm.com</a>,
<br>
> <a class="moz-txt-link-abbreviated" href="mailto:aik@au1.ibm.com">aik@au1.ibm.com</a>, <a class="moz-txt-link-abbreviated" href="mailto:pmac@au1.ibm.com">pmac@au1.ibm.com</a>, Tim
Block/Rochester/IBM@IBMUS,
<br>
> Stefan Berger/Watson/IBM@IBMUS, Hon c
Lo/Poughkeepsie/IBM@IBMUS, <br>
> George Wilson/Austin/IBM@IBMUS, Dimitrios
Pendarakis/Watson/<br>
> IBM@IBMUS, Joy Latten/Austin/IBM@IBMUS</font></tt>
<br>
<tt><font size="2">> Date: 08/11/2015 10:41 PM</font></tt>
<br>
<tt><font size="2">> Subject: Re: [SLOF] [PATCH 00/16] Add vTPM
support
to SLOF</font></tt>
<br>
<tt><font size="2">> <br>
> On Mon, Aug 10, 2015 at 06:55:10AM -0400, Stefan Berger
wrote:<br>
> > The following series of patches adds TPM support to
SLOF.<br>
> > In particular it adds the following:<br>
> > <br>
> > - TPM drivers for hardware interface and CRQ
interface<br>
> > - TPM initialization<br>
> > - TPM logging area and firmware API to transfer it
to the OS<br>
> > (measurements are visible in sysfs)<br>
> > - Some measurement code (Static Core Root Of Trust)<br>
> > - TPM menu (accessible via 't' key during boot if
TPM is available)<br>
> > - Firmware API extensions following Power Firmware
Doc<br>
> > (to make trusted grub work)<br>
> > <br>
> > Necessarily, some of its parts are written in Forth,
many are
written<br>
> > in 'C'. The extensions are known to work with QEMU
for ppc64
running Linux.<br>
> > <br>
> > Patches 4-6 will eventually need to be merged to
avoid compiler
warnings<br>
> > related to unused functions.<br>
> <br>
> So, your cover letter seems to be missing the single most
important<br>
> bit of information: why is this useful?</font></tt>
<br>
<br>
<tt><font size="2">The firmware extensions are necessary for
initializing
the TPM, establishing </font></tt>
<br>
<tt><font size="2">a core root of trust for measurements, etc,
which
is required for systems with</font></tt>
<br>
<tt><font size="2">an attached TPM. The same is then true for
systems
with an attached vTPM.</font></tt>
<br>
<br>
<tt><font size="2">Otherwise having a vTPM attached to a VM
provides
the following benefits:</font></tt>
<br>
<br>
<tt><font size="2">- enablement of trusted boot; this allow us to
eventually
extend the chain of trust from the hypervisor to the guests</font></tt>
<br>
<tt><font size="2">- enablement of attestation so that one can
verify
what software is running on a machine</font></tt>
<br>
<tt><font size="2">- provides TPM functionality to VMs, which
includes
a standardized mechanism to store keys and other blobs</font></tt>
<br>
<tt><font size="2"> (Linux trusted keys, GNU TLS's TPM
extensions)<br>
</font></tt></blockquote>
<br>
FYI: The latest version of the patches are available here now:<br>
<br>
<a class="moz-txt-link-freetext" href="https://github.com/stefanberger/SLOF-tpm/tree/SLOF-tpm">https://github.com/stefanberger/SLOF-tpm/tree/SLOF-tpm</a><br>
<br>
<blockquote
cite="mid:OFFC2FA4C6.CD60EFE8-ON85257EA1.00018BA0-85257EA1.00020DE0@us.ibm.com"
type="cite"><tt><font size="2">
</font></tt>
<br>
<tt><font size="2">Regards,</font></tt>
<br>
<tt><font size="2"> Stefan</font></tt>
<br>
</blockquote>
<br>
</body>
</html>