Commit 1d55fdc8 authored by Ashish Kalra's avatar Ashish Kalra Committed by Herbert Xu

crypto: ccp - Retry SEV INIT command in case of integrity check failure.

SEV INIT command loads the SEV related persistent data from NVS
and initializes the platform context. The firmware validates the
persistent state. If validation fails, the firmware will reset
the persisent state and return an integrity check failure status.

At this point, a subsequent INIT command should succeed, so retry
the command. The INIT command retry is only done during driver
initialization.

Additional enums along with SEV_RET_SECURE_DATA_INVALID are added
to sev_ret_code to maintain continuity and relevance of enum values.
Signed-off-by: default avatarAshish Kalra <ashish.kalra@amd.com>
Acked-by: default avatarDavid Rientjes <rientjes@google.com>
Reviewed-by: default avatarBrijesh Singh <brijesh.singh@amd.com>
Signed-off-by: default avatarHerbert Xu <herbert@gondor.apana.org.au>
parent 48fe583f
...@@ -1064,6 +1064,18 @@ void psp_pci_init(void) ...@@ -1064,6 +1064,18 @@ void psp_pci_init(void)
/* Initialize the platform */ /* Initialize the platform */
rc = sev_platform_init(&error); rc = sev_platform_init(&error);
if (rc && (error == SEV_RET_SECURE_DATA_INVALID)) {
/*
* INIT command returned an integrity check failure
* status code, meaning that firmware load and
* validation of SEV related persistent data has
* failed and persistent state has been erased.
* Retrying INIT command here should succeed.
*/
dev_dbg(sp->dev, "SEV: retrying INIT command");
rc = sev_platform_init(&error);
}
if (rc) { if (rc) {
dev_err(sp->dev, "SEV: failed to INIT error %#x\n", error); dev_err(sp->dev, "SEV: failed to INIT error %#x\n", error);
return; return;
......
...@@ -58,6 +58,9 @@ typedef enum { ...@@ -58,6 +58,9 @@ typedef enum {
SEV_RET_HWSEV_RET_PLATFORM, SEV_RET_HWSEV_RET_PLATFORM,
SEV_RET_HWSEV_RET_UNSAFE, SEV_RET_HWSEV_RET_UNSAFE,
SEV_RET_UNSUPPORTED, SEV_RET_UNSUPPORTED,
SEV_RET_INVALID_PARAM,
SEV_RET_RESOURCE_LIMIT,
SEV_RET_SECURE_DATA_INVALID,
SEV_RET_MAX, SEV_RET_MAX,
} sev_ret_code; } sev_ret_code;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment