1 /* SPDX-License-Identifier: GPL-2.0-only WITH Linux-syscall-note */
2 /*
3  * Userspace interface for AMD SEV and SNP guest driver.
4  *
5  * Copyright (C) 2021 Advanced Micro Devices, Inc.
6  *
7  * Author: Brijesh Singh <brijesh.singh@amd.com>
8  *
9  * SEV API specification is available at: https://developer.amd.com/sev/
10  */
11 
12 #ifndef __UAPI_LINUX_SEV_GUEST_H_
13 #define __UAPI_LINUX_SEV_GUEST_H_
14 
15 #include <linux/types.h>
16 
17 #define SNP_REPORT_USER_DATA_SIZE 64
18 
19 struct snp_report_req {
20 	/* user data that should be included in the report */
21 	__u8 user_data[SNP_REPORT_USER_DATA_SIZE];
22 
23 	/* The vmpl level to be included in the report */
24 	__u32 vmpl;
25 
26 	/* Must be zero filled */
27 	__u8 rsvd[28];
28 };
29 
30 struct snp_report_resp {
31 	/* response data, see SEV-SNP spec for the format */
32 	__u8 data[4000];
33 };
34 
35 struct snp_derived_key_req {
36 	__u32 root_key_select;
37 	__u32 rsvd;
38 	__u64 guest_field_select;
39 	__u32 vmpl;
40 	__u32 guest_svn;
41 	__u64 tcb_version;
42 };
43 
44 struct snp_derived_key_resp {
45 	/* response data, see SEV-SNP spec for the format */
46 	__u8 data[64];
47 };
48 
49 struct snp_guest_request_ioctl {
50 	/* message version number (must be non-zero) */
51 	__u8 msg_version;
52 
53 	/* Request and response structure address */
54 	__u64 req_data;
55 	__u64 resp_data;
56 
57 	/* bits[63:32]: VMM error code, bits[31:0] firmware error code (see psp-sev.h) */
58 	union {
59 		__u64 exitinfo2;
60 		struct {
61 			__u32 fw_error;
62 			__u32 vmm_error;
63 		};
64 	};
65 };
66 
67 struct snp_ext_report_req {
68 	struct snp_report_req data;
69 
70 	/* where to copy the certificate blob */
71 	__u64 certs_address;
72 
73 	/* length of the certificate blob */
74 	__u32 certs_len;
75 };
76 
77 #define SNP_GUEST_REQ_IOC_TYPE	'S'
78 
79 /* Get SNP attestation report */
80 #define SNP_GET_REPORT _IOWR(SNP_GUEST_REQ_IOC_TYPE, 0x0, struct snp_guest_request_ioctl)
81 
82 /* Get a derived key from the root */
83 #define SNP_GET_DERIVED_KEY _IOWR(SNP_GUEST_REQ_IOC_TYPE, 0x1, struct snp_guest_request_ioctl)
84 
85 /* Get SNP extended report as defined in the GHCB specification version 2. */
86 #define SNP_GET_EXT_REPORT _IOWR(SNP_GUEST_REQ_IOC_TYPE, 0x2, struct snp_guest_request_ioctl)
87 
88 /* Guest message request EXIT_INFO_2 constants */
89 #define SNP_GUEST_FW_ERR_MASK		GENMASK_ULL(31, 0)
90 #define SNP_GUEST_VMM_ERR_SHIFT		32
91 #define SNP_GUEST_VMM_ERR(x)		(((u64)x) << SNP_GUEST_VMM_ERR_SHIFT)
92 #define SNP_GUEST_FW_ERR(x)		((x) & SNP_GUEST_FW_ERR_MASK)
93 #define SNP_GUEST_ERR(vmm_err, fw_err)	(SNP_GUEST_VMM_ERR(vmm_err) | \
94 					 SNP_GUEST_FW_ERR(fw_err))
95 
96 #define SNP_GUEST_VMM_ERR_INVALID_LEN	1
97 #define SNP_GUEST_VMM_ERR_BUSY		2
98 
99 #endif /* __UAPI_LINUX_SEV_GUEST_H_ */
100