Expand description
Include modules that define the data structures of VMGS entries.
Structs§
- DekKp
- DEK key protector entry.
- GspKp
- GSP key protector entry.
- Guest
Secret Key - The data format of the
FileId::GUEST_SECRET_KEYentry in the VMGS file. - Hardware
KeyProtector - The data format of the
FileId::HW_KEY_PROTECTORentry in the VMGS file. - Hardware
KeyProtector Header - The header of
HardwareKeyProtector. - Hardware
KeyProtector Header V3 - Version-3 header. Shares the
version/lengthprefix withHardwareKeyProtectorHeaderso the version can be read first, then carries a TEE-tagged SVN blob bound into the derived key. - Hardware
KeyProtector V3 - Version-3 data format of the
FileId::HW_KEY_PROTECTORentry. - KeyProtector
- The data format of the
FileId::KEY_PROTECTORentry in the VMGS file. - KeyProtector
ById - The data format of the host/fabric-provided key protector.
- Security
Profile - The data format of the
FileId::ATTESTentry in the VMGS file.
Constants§
- AES_
CBC_ IV_ LENGTH - AES-CBC IV size
- AES_
CBC_ KEY_ LENGTH - AES-CBC key size
- AES_
GCM_ KEY_ LENGTH - AES-GCM key size
- AGENT_
DATA_ MAX_ SIZE - Maximum size of the
agent_data. - DEK_
BUFFER_ SIZE - DEK buffer size
- GSP_
BUFFER_ SIZE - GSP buffer size
- GUEST_
SECRET_ KEY_ MAX_ SIZE - Maximum size of the
guest_secret_key. - HMAC_
SHA_ 256_ KEY_ LENGTH - HMAC-SHA-256 key size
- HW_
KEY_ PROTECTOR_ CURRENT_ VERSION - HW_
KEY_ PROTECTOR_ SIZE - The size of the
FileId::HW_KEY_PROTECTORentry in the VMGS file. - HW_
KEY_ PROTECTOR_ SVN_ SIZE - Size of the TEE-specific SVN blob in
HardwareKeyProtectorHeaderV3. - HW_
KEY_ PROTECTOR_ TEE_ TYPE_ SNP - TEE tag stored in
HardwareKeyProtectorHeaderV3::tee_type. - HW_
KEY_ PROTECTOR_ TEE_ TYPE_ TDX - TEE tag stored in
HardwareKeyProtectorHeaderV3::tee_type. - HW_
KEY_ PROTECTOR_ V3_ SIZE - The size of a version-3
FileId::HW_KEY_PROTECTORentry. - HW_
KEY_ PROTECTOR_ VERSION_ 1 - VMGS hardware key protector entry that includes the metadata of local hardware sealing with AES-CBC-HMAC-SHA256.
- HW_
KEY_ PROTECTOR_ VERSION_ 2 - HW_
KEY_ PROTECTOR_ VERSION_ 3 - Version 3 is a unified, TEE-tagged format used for all newly-created
protectors (SNP and TDX). It records the raw report SVNs so the derived key
can bind every SVN the TEE mixes in (for TDX, both
TEE_TCB_SVNandCPU_SVN) rather than a lossyu64. v2 is retained read-only for legacy SNP protectors. - KEY_
PROTECTOR_ SIZE - Size of the
FileId::KEY_PROTECTORVMGS file entry. - NUMBER_
KP - Number of the key protector entries. One for ingress, and one for egress