On Tue, Mar 18, 2025 at 10:44 PM Peter Maydell wrote:
>
> On Mon, 9 Sept 2024 at 15:21, Daniel P. Berrangé wrote:
> >
> > From: Dorjoy Chowdhury
> >
> > An utility function for getting fingerprint from X.509 certificate
> > has been introduced. Implementatio
nsm.c | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
Reviewed-by: Dorjoy Chowdhury
Thanks for fixing!
Regards,
dorjoy
On Wed, Jan 8, 2025 at 10:03 PM Philippe Mathieu-Daudé
wrote:
>
> On 7/1/25 18:01, Dorjoy Chowdhury wrote:
> > On Tue, Dec 31, 2024 at 12:26 AM Dorjoy Chowdhury
> > wrote:
> >>
> >> On Thu, Dec 12, 2024 at 8:14 PM Dorjoy Chowdhury
> >> wrote
On Tue, Dec 31, 2024 at 12:26 AM Dorjoy Chowdhury
wrote:
>
> On Thu, Dec 12, 2024 at 8:14 PM Dorjoy Chowdhury
> wrote:
> >
> > On Thu, Dec 12, 2024 at 4:25 AM Alexander Graf wrote:
> > >
> > > The documentation says that Nitro Enclaves are based on Fir
On Thu, Dec 12, 2024 at 8:14 PM Dorjoy Chowdhury wrote:
>
> On Thu, Dec 12, 2024 at 4:25 AM Alexander Graf wrote:
> >
> > The documentation says that Nitro Enclaves are based on Firecracker. AWS
> > has never made that statement.
> >
> > This patch nudges
> Signed-off-by: Alexander Graf
> ---
> docs/system/i386/nitro-enclave.rst | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
Reviewed-by: Dorjoy Chowdhury
cc Paolo. This can be picked up for merging along with the 3 other
nitro-enclave related patches from me.
Regards,
Dorjoy
On Mon, Dec 2, 2024 at 9:39 PM Alexander Graf wrote:
>
>
> On 09.11.24 13:30, Dorjoy Chowdhury wrote:
> > We were storing the pointers to buffers in a GList due to lack of
> > stateful crypto apis and instead doing the final hash computation at
> > the end after we ha
On Mon, Dec 2, 2024 at 9:37 PM Alexander Graf wrote:
>
>
> On 09.11.24 13:32, Dorjoy Chowdhury wrote:
> > NSM device in AWS Nitro Enclaves supports extending with both
> > bytestring and string data.
> >
> > Signed-off-by: Dorjoy Chowdhury
>
>
> Reviewed
On Mon, Dec 2, 2024 at 9:36 PM Alexander Graf wrote:
>
>
> On 09.11.24 13:28, Dorjoy Chowdhury wrote:
> >
> > Signed-off-by: Dorjoy Chowdhury
>
>
> (nit: Please make sure to always have a patch description in the body of
> the patch, even if it feels like the sub
On Mon, Nov 25, 2024 at 8:59 PM Dorjoy Chowdhury wrote:
>
> On Mon, Nov 18, 2024 at 7:10 PM Dorjoy Chowdhury
> wrote:
> >
> > Ping.
> >
>
> Ping...
>
> This is a very small one that should fix the UI issue in
> https://www.qemu.org/docs/master/syst
On Mon, Nov 25, 2024 at 9:01 PM Dorjoy Chowdhury wrote:
>
> On Mon, Nov 18, 2024 at 7:13 PM Dorjoy Chowdhury
> wrote:
> >
> > Ping.
> >
>
> Ping...
> This hasn't been reviewed and I think this one simplifies the code in
> eif.c and is quite small.
>
Gentle ping.
Regards,
Dorjoy
On Mon, Nov 25, 2024 at 9:00 PM Dorjoy Chowdhury wrote:
>
> On Mon, Nov 18, 2024 at 7:12 PM Dorjoy Chowdhury
> wrote:
> >
> > Ping.
> >
>
> Ping...
> This is a small one that can be reviewed and picked up for merging. Thanks!
>
Gentle ping.
Regards,
Dorjoy
On Mon, Nov 18, 2024 at 7:13 PM Dorjoy Chowdhury wrote:
>
> Ping.
>
Ping...
This hasn't been reviewed and I think this one simplifies the code in
eif.c and is quite small.
Regards,
Dorjoy
On Mon, Nov 18, 2024 at 7:12 PM Dorjoy Chowdhury wrote:
>
> Ping.
>
Ping...
This is a small one that can be reviewed and picked up for merging. Thanks!
Regards,
Dorjoy
On Mon, Nov 18, 2024 at 7:10 PM Dorjoy Chowdhury wrote:
>
> Ping.
>
Ping...
This is a very small one that should fix the UI issue in
https://www.qemu.org/docs/master/system/i386/nitro-enclave.html . It
would be great if it could be reviewed and picked up for merging.
Thanks!
Regards,
Dorjoy
Ping.
This is also a smaller one that needs to be reviewed.
Regards,
Dorjoy
Ping.
This is a small one that needs review.
Regards,
Dorjoy
Ping.
Regards,
Dorjoy
Hey Alex,
On Tue, Nov 12, 2024, 6:14 PM Alexander Graf wrote:
> Hey Dorjoy,
>
> Thanks a lot for the patch! Would you mind to send to the ML so it can
> go through the normal review + apply cycle? :)
>
> Same comment for the other patches.
>
I don't understand. I sent them to the mailing list
Signed-off-by: Dorjoy Chowdhury
---
docs/system/i386/nitro-enclave.rst | 8
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/docs/system/i386/nitro-enclave.rst
b/docs/system/i386/nitro-enclave.rst
index 73e3edefe5..48eda5bd9e 100644
--- a/docs/system/i386/nitro-enclave.rst
NSM device in AWS Nitro Enclaves supports extending with both
bytestring and string data.
Signed-off-by: Dorjoy Chowdhury
---
hw/virtio/virtio-nsm.c | 21 ++---
1 file changed, 14 insertions(+), 7 deletions(-)
diff --git a/hw/virtio/virtio-nsm.c b/hw/virtio/virtio-nsm.c
index
* functions which makes the code much simpler.
Signed-off-by: Dorjoy Chowdhury
---
hw/core/eif.c | 202
hw/i386/nitro_enclave.c | 12 +-
include/hw/i386/nitro_enclave.h | 16 +--
3 files changed, 91 insertions(+), 139 deletions(-)
diff
On Fri, Nov 8, 2024 at 11:38 PM Paolo Bonzini wrote:
>
> Check for overflow as well as allocation failure. Resolves Coverity CID
> 1564859.
>
> Reviewed-by: Pierrick Bouvier
> Reviewed-by: Dorjoy Chowdhury
> Signed-off-by: Paolo Bonzini
> -
On Wed, Nov 6, 2024 at 11:44 PM Paolo Bonzini wrote:
>
> Check for overflow as well as allocation failure. Resolves Coverity CID
> 1564859.
>
> Signed-off-by: Paolo Bonzini
> ---
> hw/core/eif.c | 48 +---
> 1 file changed, 41 insertions(+), 7 deleti
On Thu, Nov 7, 2024 at 12:12 AM Paolo Bonzini wrote:
>
> Check for overflow to avoid that fseek() receives a sign-extended value.
>
> Cc: Dorjoy Chowdhury
> Signed-off-by: Paolo Bonzini
> ---
> include/qemu/osdep.h | 4
> hw/core/eif.c| 4
> 2
On Wed, Nov 6, 2024 at 11:58 PM Paolo Bonzini wrote:
>
> On Wed, Nov 6, 2024 at 6:54 PM Pierrick Bouvier
> wrote:
> >
> > On 11/6/24 09:49, Paolo Bonzini wrote:
> > > On Wed, Nov 6, 2024 at 6:47 PM Pierrick Bouvier
> > > wrote:
> > >
> > >>>for (int i = 0; i < MAX_SECTIONS; ++i) {
> > >>
ged, 41 insertions(+), 7 deletions(-)
>
Reviewed-by: Dorjoy Chowdhury
Thanks for fixing!
Regards,
Dorjoy
Hi Alex,
On Tue, Nov 5, 2024 at 9:37 PM Alexander Graf wrote:
>
> Hi Dorjoy,
>
>
> On 05.11.24 14:56, Dorjoy Chowdhury wrote:
> > On Tue, Nov 5, 2024 at 6:51 PM Paolo Bonzini wrote:
> >> On Tue, Nov 5, 2024 at 12:44 PM Peter Maydell
> >> wrote:
> >
On Tue, Nov 5, 2024 at 6:51 PM Paolo Bonzini wrote:
>
> On Tue, Nov 5, 2024 at 12:44 PM Peter Maydell
> wrote:
> > Hi; Coverity raises a couple of potential issues with the
> > read_eif_file() function in this commit, which are both
> > "Coverity assumes the file we're reading is untrusted and i
On Wed, Oct 30, 2024, 5:31 PM Paolo Bonzini wrote:
> On 10/30/24 09:43, Alexander Graf wrote:
> >> Hi,
> >>
> >> sorry about the delay -- the patches failed CI and I didn't have much
> >> time to investigate until now.
> >>
> >> The issues are basically:
> >>
> >> 1) some rST syntax errors
> >>
>
On Wed, Oct 30, 2024, 1:03 PM Paolo Bonzini wrote:
> On Tue, Oct 29, 2024 at 9:08 PM Dorjoy Chowdhury
> wrote:
> > Thanks for fixing. The attached patch looks great to me. I just have
> > one suggestion. Now that the CONFIG_* symbols have the dependencies
> > listed e
Hi Paolo,
On Wed, Oct 30, 2024 at 1:32 AM Paolo Bonzini wrote:
>
> On 10/23/24 16:27, Dorjoy Chowdhury wrote:
> > On Wed, Oct 16, 2024 at 7:58 PM Dorjoy Chowdhury
> > wrote:
> >>
> >> Ping
> >>
> >> This patch series has been reviewed by Al
On Wed, Oct 16, 2024 at 7:58 PM Dorjoy Chowdhury wrote:
>
> Ping
>
> This patch series has been reviewed by Alex. I am not sure if it needs
> more review. If not, maybe this can be picked up for merging. Thanks!
>
Gentle ping.
This patch series has been reviewed by Alex and
Ping
This patch series has been reviewed by Alex. I am not sure if it needs
more review. If not, maybe this can be picked up for merging. Thanks!
Regards,
Dorjoy
+++---
> include/crypto/hmac.h | 17 -
> tests/unit/test-crypto-hash.c | 7 ---
> tests/unit/test-crypto-hmac.c | 6 --
> 8 files changed, 88 insertions(+), 28 deletions(-)
>
Reviewed-by: Dorjoy Chowdhury
@Daniel the api documentation for &q
On Tue, Oct 15, 2024 at 6:56 PM Daniel P. Berrangé
wrote:
> If the user provides a pre-allocated buffer for the hash result,
> we must use that rather than re-allocating a new buffer.
>
> Reported-by: Dorjoy Chowdhury
> Signed-off-by: Daniel P. Berrangé
> ---
> cryp
Hi,
I think there maybe some bugs caused by the recent crypto patches that got
merged to master. ref:
https://lore.kernel.org/qemu-devel/cafeaca-e_1wflun2hpttt2bszxksmbnxkak_uzuhwrh_fb6...@mail.gmail.com/T/#t
I think before these patches the "qcrypto_hash_bytes" or
"qcrypto_hash_bytesv" apis used
Thanks for reviewing. I have now submitted a v8.
https://lore.kernel.org/qemu-devel/20241008211727.49088-1-dorjoychy...@gmail.com/T/#t
Regards,
Dorjoy
e.
[1] https://docs.aws.amazon.com/enclaves/latest/user/nitro-enclave.html
[2] https://aws.amazon.com/ec2/
[3] https://github.com/aws/aws-nitro-enclaves-image-format
[4] https://github.com/rust-vmm/vhost-device/tree/main/vhost-device-vsock
Signed-off-by: Dorjoy Chowdhury
---
MAINTAINERS
Signed-off-by: Dorjoy Chowdhury
---
MAINTAINERS| 1 +
docs/system/i386/nitro-enclave.rst | 78 ++
2 files changed, 79 insertions(+)
create mode 100644 docs/system/i386/nitro-enclave.rst
diff --git a/MAINTAINERS b/MAINTAINERS
index f78a7cca06
/user/nitro-enclave.html
[3] http://cbor.io/
[4] https://libcbor.readthedocs.io/en/latest/
Signed-off-by: Dorjoy Chowdhury
---
MAINTAINERS | 10 +
hw/virtio/Kconfig|5 +
hw/virtio/cbor-helpers.c | 321 ++
hw/virtio/meson.build|6
This is in preparation for the next commit where the nitro-enclave
machine type will need to instead use a memfd backend for the built-in
vhost-user-vsock device to work.
Signed-off-by: Dorjoy Chowdhury
---
backends/hostmem-memfd.c | 2 --
hw/core/machine.c| 71
tests/lcitool/projects/qemu.yml.
Reviewed-by: Daniel P. Berrangé
Signed-off-by: Dorjoy Chowdhury
---
.gitlab-ci.d/cirrus/macos-14.vars | 2 +-
.gitlab-ci.d/cirrus/macos-15.vars | 2 +-
scripts/ci/setup/ubuntu/ubuntu-2204-aarch64.yaml | 1 +
scripts/ci
commit where
CONFIG_NITRO_ENCLAVE will be introduced.
[1] https://github.com/aws/aws-nitro-enclaves-image-format
[2] https://docs.aws.amazon.com/enclaves/latest/user/nitro-enclave.html
Signed-off-by: Dorjoy Chowdhury
---
MAINTAINERS | 7 +
hw/core/eif.c | 719
cli/blob/main/docs/ubuntu_20.04_how_to_install_nitro_cli_from_github_sources.md
[9]
https://github.com/aws/aws-nitro-enclaves-cli/blob/main/examples/x86_64/hello/README.md
Dorjoy Chowdhury (6):
tests/lcitool: Update libvirt-ci and add libcbor dependency
device/virtio-nsm: Support for Nitro Secure Module device
hw/core: Add Enclave Image Format (EI
On Tue, Oct 1, 2024 at 7:15 PM Michael S. Tsirkin wrote:
>
> On Sun, Sep 22, 2024 at 03:44:36PM +0600, Dorjoy Chowdhury wrote:
> > [7]
> > https://lists.oasis-open.org/archives/virtio-comment/202310/msg00387.html
>
> That list is dead, would you mind reposting to the ne
Ping
Requesting for review on this one.
v7 thread URL for convenience:
https://lore.kernel.org/qemu-devel/20240922094441.23802-1-dorjoychy...@gmail.com/T/#t
Thanks!
Regards,
Dorjoy
/user/nitro-enclave.html
[3] http://cbor.io/
[4] https://libcbor.readthedocs.io/en/latest/
Signed-off-by: Dorjoy Chowdhury
---
MAINTAINERS | 10 +
hw/virtio/Kconfig|5 +
hw/virtio/cbor-helpers.c | 326 ++
hw/virtio/meson.build|6
Thanks for reviewing. I have now submitted a v7 :
https://lore.kernel.org/qemu-devel/20240922094441.23802-1-dorjoychy...@gmail.com/T/#t
Regards,
Dorjoy
cli/blob/main/docs/ubuntu_20.04_how_to_install_nitro_cli_from_github_sources.md
[9]
https://github.com/aws/aws-nitro-enclaves-cli/blob/main/examples/x86_64/hello/README.md
Dorjoy Chowdhury (5):
tests/lcitool: Update libvirt-ci and add libcbor dependency
device/virtio-nsm: Support for Nitro Secure Module dev
e.
[1] https://docs.aws.amazon.com/enclaves/latest/user/nitro-enclave.html
[2] https://aws.amazon.com/ec2/
[3] https://github.com/aws/aws-nitro-enclaves-image-format
[4] https://github.com/rust-vmm/vhost-device/tree/main/vhost-device-vsock
Signed-off-by: Dorjoy Chowdhury
---
MAINTAINERS
Signed-off-by: Dorjoy Chowdhury
---
MAINTAINERS| 1 +
docs/system/i386/nitro-enclave.rst | 78 ++
2 files changed, 79 insertions(+)
create mode 100644 docs/system/i386/nitro-enclave.rst
diff --git a/MAINTAINERS b/MAINTAINERS
index 37411dfffa
commit where
CONFIG_NITRO_ENCLAVE will be introduced.
[1] https://github.com/aws/aws-nitro-enclaves-image-format
[2] https://docs.aws.amazon.com/enclaves/latest/user/nitro-enclave.html
Signed-off-by: Dorjoy Chowdhury
---
MAINTAINERS | 7 +
hw/core/eif.c | 719
tests/lcitool/projects/qemu.yml.
Reviewed-by: Daniel P. Berrangé
Signed-off-by: Dorjoy Chowdhury
---
.gitlab-ci.d/cirrus/macos-13.vars | 2 +-
.gitlab-ci.d/cirrus/macos-14.vars | 2 +-
scripts/ci/setup/ubuntu/ubuntu-2204-aarch64.yaml | 1 +
scripts/ci
On Mon, Sep 16, 2024, 1:26 AM Michael S. Tsirkin wrote:
> On Fri, Sep 06, 2024 at 01:57:32AM +0600, Dorjoy Chowdhury wrote:
> > Nitro Secure Module (NSM)[1] device is used in AWS Nitro Enclaves[2]
> > for stripped down TPM functionality like cryptographic attestation.
> >
ping
Requesting for review on this patch series. The first 3 patches have
been merged by Daniel but the rest need to be reviewed. Thanks!
patch URL:
https://lore.kernel.org/qemu-devel/20240905195735.16911-1-dorjoychy...@gmail.com/T/#t
Regards,
Dorjoy
On Fri, Sep 6, 2024 at 7:50 PM Daniel P. Berrangé wrote:
>
> On Fri, Sep 06, 2024 at 01:57:30AM +0600, Dorjoy Chowdhury wrote:
> > An utility function for getting fingerprint from X.509 certificate
> > has been introduced. Implementation only provided using gnutls.
> >
&
Thanks for reviewing. I have now posted a v6
https://lists.gnu.org/archive/html/qemu-devel/2024-09/msg00823.html
Regards,
Dorjoy
On Thu, Aug 29, 2024 at 2:15 PM Daniel P. Berrangé wrote:
>
> On Wed, Aug 28, 2024 at 09:50:25PM +0600, Dorjoy Chowdhury wrote:
> > Hi Daniel,
> >
> > On Wed, Aug 28, 2024 at 9:39 PM Daniel P. Berrangé
> > wrote:
> > >
> > > On Thu, Aug 22,
An utility function for getting fingerprint from X.509 certificate
has been introduced. Implementation only provided using gnutls.
Signed-off-by: Dorjoy Chowdhury
---
crypto/meson.build | 4 ++
crypto/x509-utils.c | 75 +
include/crypto/x509
/user/nitro-enclave.html
[3] http://cbor.io/
[4] https://libcbor.readthedocs.io/en/latest/
Signed-off-by: Dorjoy Chowdhury
---
MAINTAINERS | 10 +
hw/virtio/Kconfig|5 +
hw/virtio/cbor-helpers.c | 326 ++
hw/virtio/meson.build|6
Reviewed-by: Daniel P. Berrangé
Signed-off-by: Dorjoy Chowdhury
---
crypto/hash.c | 14 +++---
include/crypto/hash.h | 8
2 files changed, 15 insertions(+), 7 deletions(-)
diff --git a/crypto/hash.c b/crypto/hash.c
index b0f8228bdc..8087f5dae6 100644
--- a/crypto
tests/lcitool/projects/qemu.yml.
Reviewed-by: Daniel P. Berrangé
Signed-off-by: Dorjoy Chowdhury
---
.gitlab-ci.d/cirrus/macos-13.vars | 2 +-
.gitlab-ci.d/cirrus/macos-14.vars | 2 +-
scripts/ci/setup/ubuntu/ubuntu-2204-aarch64.yaml | 1 +
scripts/ci
e.
[1] https://docs.aws.amazon.com/enclaves/latest/user/nitro-enclave.html
[2] https://aws.amazon.com/ec2/
[3] https://github.com/aws/aws-nitro-enclaves-image-format
[4] https://github.com/rust-vmm/vhost-device/tree/main/vhost-device-vsock
Signed-off-by: Dorjoy Chowdhury
---
MAINTAINERS
commit where
CONFIG_NITRO_ENCLAVE will be introduced.
[1] https://github.com/aws/aws-nitro-enclaves-image-format
[2] https://docs.aws.amazon.com/enclaves/latest/user/nitro-enclave.html
Signed-off-by: Dorjoy Chowdhury
---
MAINTAINERS | 7 +
hw/core/eif.c | 719
Signed-off-by: Dorjoy Chowdhury
---
MAINTAINERS| 1 +
docs/system/i386/nitro-enclave.rst | 78 ++
2 files changed, 79 insertions(+)
create mode 100644 docs/system/i386/nitro-enclave.rst
diff --git a/MAINTAINERS b/MAINTAINERS
index e06aa4a5d7
.com/aws/aws-nitro-enclaves-cli/blob/main/examples/x86_64/hello/README.md
Dorjoy Chowdhury (8):
crypto: Define macros for hash algorithm digest lengths
crypto: Support SHA384 hash when using glib
crypto: Introduce x509 utils
tests/lcitool: Update libvirt-ci and add libcbor dependency
devic
QEMU requires minimum glib version 2.66.0 as per the root meson.build
file and per glib documentation[1] G_CHECKSUM_SHA384 is available since
2.51.
[1] https://docs.gtk.org/glib/enum.ChecksumType.html
Reviewed-by: Daniel P. Berrangé
Signed-off-by: Dorjoy Chowdhury
---
crypto/hash-glib.c | 2
On Thu, Sep 5, 2024, 2:27 AM Michael S. Tsirkin wrote:
> On Thu, Sep 05, 2024 at 12:30:07AM +0600, Dorjoy Chowdhury wrote:
> > On Wed, Sep 4, 2024 at 2:47 AM Dorjoy Chowdhury
> wrote:
> > >
> > >
> > >
> > > On Wed, Sep 4, 2024, 2:32 AM Michael S
On Wed, Sep 4, 2024 at 2:47 AM Dorjoy Chowdhury wrote:
>
>
>
> On Wed, Sep 4, 2024, 2:32 AM Michael S. Tsirkin wrote:
>>
>> On Wed, Sep 04, 2024 at 01:58:15AM +0600, Dorjoy Chowdhury wrote:
>> > On Thu, Aug 29, 2024 at 1:11 AM Michael S. Tsirkin wrote:
>>
On Wed, Sep 4, 2024, 2:32 AM Michael S. Tsirkin wrote:
> On Wed, Sep 04, 2024 at 01:58:15AM +0600, Dorjoy Chowdhury wrote:
> > On Thu, Aug 29, 2024 at 1:11 AM Michael S. Tsirkin
> wrote:
> > >
> > > On Thu, Aug 29, 2024 at 01:04:05AM +0600, Dorjoy Chowdhury wrote
On Thu, Aug 29, 2024 at 1:11 AM Michael S. Tsirkin wrote:
>
> On Thu, Aug 29, 2024 at 01:04:05AM +0600, Dorjoy Chowdhury wrote:
> > On Thu, Aug 29, 2024 at 12:28 AM Michael S. Tsirkin wrote:
> > >
> > > On Thu, Aug 22, 2024 at 09:08:46PM +0600, Dorjoy Chowdhury wrot
On Thu, Aug 29, 2024 at 12:28 AM Michael S. Tsirkin wrote:
>
> On Thu, Aug 22, 2024 at 09:08:46PM +0600, Dorjoy Chowdhury wrote:
> > Nitro Secure Module (NSM)[1] device is used in AWS Nitro Enclaves[2]
> > for stripped down TPM functionality like cryptographic attestation.
>
Hi Daniel,
On Wed, Aug 28, 2024 at 9:39 PM Daniel P. Berrangé wrote:
>
> On Thu, Aug 22, 2024 at 09:08:48PM +0600, Dorjoy Chowdhury wrote:
> > AWS nitro enclaves[1] is an Amazon EC2[2] feature that allows creating
> > isolated execution environments, called enclave
Thanks for taking the time to review. v5 posted now:
https://lists.gnu.org/archive/html/qemu-devel/2024-08/msg03251.html
Regards,
Dorjoy
Hi Daniel,
On Mon, Aug 19, 2024 at 4:37 PM Daniel P. Berrangé wrote:
>
> On Sun, Aug 18, 2024 at 05:42:55PM +0600, Dorjoy Chowdhury wrote:
> > AWS Nitro Enclaves have built-in Nitro Secure Module (NSM) device which
> > is used for stripped down TPM functionality like attest
-enclave.html
Signed-off-by: Dorjoy Chowdhury
---
hw/core/eif.c | 719 ++
hw/core/eif.h | 22 ++
2 files changed, 741 insertions(+)
create mode 100644 hw/core/eif.c
create mode 100644 hw/core/eif.h
diff --git a/hw/core/eif.c b/hw/core/eif.c
new file
Signed-off-by: Dorjoy Chowdhury
---
crypto/hash.c | 14 +++---
include/crypto/hash.h | 8
2 files changed, 15 insertions(+), 7 deletions(-)
diff --git a/crypto/hash.c b/crypto/hash.c
index b0f8228bdc..8087f5dae6 100644
--- a/crypto/hash.c
+++ b/crypto/hash.c
@@ -23,13
Signed-off-by: Dorjoy Chowdhury
---
docs/system/i386/nitro-enclave.rst | 85 ++
1 file changed, 85 insertions(+)
create mode 100644 docs/system/i386/nitro-enclave.rst
diff --git a/docs/system/i386/nitro-enclave.rst
b/docs/system/i386/nitro-enclave.rst
new file mode
/user/nitro-enclave.html
[3] http://cbor.io/
[4] https://libcbor.readthedocs.io/en/latest/
Signed-off-by: Dorjoy Chowdhury
---
MAINTAINERS | 10 +
hw/virtio/Kconfig|5 +
hw/virtio/cbor-helpers.c | 326 ++
hw/virtio/meson.build|6
tests/lcitool/projects/qemu.yml.
Signed-off-by: Dorjoy Chowdhury
---
.gitlab-ci.d/cirrus/macos-13.vars | 2 +-
.gitlab-ci.d/cirrus/macos-14.vars | 2 +-
scripts/ci/setup/ubuntu/ubuntu-2204-aarch64.yaml | 1 +
scripts/ci/setup/ubuntu/ubuntu-2204
An utility function for getting fingerprint from X.509 certificate
has been introduced. Implementation only provided using gnutls.
Signed-off-by: Dorjoy Chowdhury
---
crypto/meson.build | 4 ++
crypto/x509-utils.c | 75 +
include/crypto/x509
e.
[1] https://docs.aws.amazon.com/enclaves/latest/user/nitro-enclave.html
[2] https://aws.amazon.com/ec2/
[3] https://github.com/aws/aws-nitro-enclaves-image-format
[4] https://github.com/rust-vmm/vhost-device/tree/main/vhost-device-vsock
Signed-off-by: Dorjoy Chowdhury
---
MAINTAINERS
QEMU requires minimum glib version 2.66.0 as per the root meson.build
file and per glib documentation[1] G_CHECKSUM_SHA384 is available since
2.51.
[1] https://docs.gtk.org/glib/enum.ChecksumType.html
Reviewed-by: Daniel P. Berrangé
Signed-off-by: Dorjoy Chowdhury
---
crypto/hash-glib.c | 2
llo/README.md
Dorjoy Chowdhury (8):
crypto: Define macros for hash algorithm digest lengths
crypto: Support SHA384 hash when using glib
crypto: Introduce x509 utils
tests/lcitool: Update libvirt-ci and add libcbor dependency
device/virtio-nsm: Support for Nitro Secure Module device
hw/c
Hey Daniel,
The libvirt-ci repository has been updated with the libcbor
dependency. Should I just update my submodule locally to point to the
new master branch and then do a separate commit i.e., "Updated
submodule..." and _then_ do this[1] as part of whatever commit
introduces the libcbor dependen
On Mon, Aug 19, 2024 at 10:10 PM Daniel P. Berrangé wrote:
>
> On Mon, Aug 19, 2024 at 10:07:02PM +0600, Dorjoy Chowdhury wrote:
> > On Mon, Aug 19, 2024 at 9:53 PM Daniel P. Berrangé
> > wrote:
> > >
> > > On Mon, Aug 19, 2024 at 09:32:55PM +0600, Dorjoy Cho
On Mon, Aug 19, 2024 at 9:58 PM Alexander Graf wrote:
>
>
> On 19.08.24 17:28, Dorjoy Chowdhury wrote:
> > Hey Alex,
> >
> > On Mon, Aug 19, 2024 at 4:13 PM Alexander Graf wrote:
> >> Hey Dorjoy,
> >>
> >> On 18.08.24 13:42, Dorjoy Chowdhu
On Mon, Aug 19, 2024 at 9:53 PM Daniel P. Berrangé wrote:
>
> On Mon, Aug 19, 2024 at 09:32:55PM +0600, Dorjoy Chowdhury wrote:
> > On Mon, Aug 19, 2024 at 4:13 PM Alexander Graf wrote:
> > >
> > > Hey Dorjoy,
> > >
> > > On 18.08.24 13:42, Dorjoy
On Mon, Aug 19, 2024 at 4:13 PM Alexander Graf wrote:
>
> Hey Dorjoy,
>
> On 18.08.24 13:42, Dorjoy Chowdhury wrote:
> > AWS Nitro Enclaves have built-in Nitro Secure Module (NSM) device which
> > is used for stripped down TPM functionality like attestation. This commit
&
Hey Alex,
On Mon, Aug 19, 2024 at 4:13 PM Alexander Graf wrote:
>
> Hey Dorjoy,
>
> On 18.08.24 13:42, Dorjoy Chowdhury wrote:
> > AWS Nitro Enclaves have built-in Nitro Secure Module (NSM) device which
> > is used for stripped down TPM functionality like attestation.
Thanks for the reviews. I have now posted a v4 at:
https://mail.gnu.org/archive/html/qemu-devel/2024-08/msg02675.html
Regards,
Dorjoy
est/user/nitro-enclave.html
[2] https://aws.amazon.com/ec2/
[3] https://github.com/aws/aws-nitro-enclaves-image-format
Signed-off-by: Dorjoy Chowdhury
---
MAINTAINERS | 9 +
configs/devices/i386-softmmu/default.mak | 1 +
hw/core/eif.c
ce. If not provided, a default id will be set.
- 'parent-role': Parent instance IAM role ARN, reflected in PCR3
of the NSM device.
- 'parent-id': Parent instance identifier, reflected in PCR4 of the
NSM device.
Signed-off-by: Dorjoy Chowdhury
---
crypto/meson.build
ad of running another whole VM with CID 3.
[1] https://github.com/rust-vmm/vhost-device/tree/main/vhost-device-vsock
Signed-off-by: Dorjoy Chowdhury
---
backends/hostmem-memfd.c| 2 -
hw/core/machine.c | 71 +-
hw/i386/Kconfig |
---
docs/system/i386/nitro-enclave.rst | 82 ++
1 file changed, 82 insertions(+)
create mode 100644 docs/system/i386/nitro-enclave.rst
diff --git a/docs/system/i386/nitro-enclave.rst
b/docs/system/i386/nitro-enclave.rst
new file mode 100644
index 00..291a8ae3
QEMU requires minimum glib version 2.66.0 as per the root meson.build
file and per glib documentation[1] G_CHECKSUM_SHA384 is available since
2.51.
[1] https://docs.gtk.org/glib/enum.ChecksumType.html
Signed-off-by: Dorjoy Chowdhury
---
crypto/hash-glib.c | 2 +-
1 file changed, 1 insertion
ocs/ubuntu_20.04_how_to_install_nitro_cli_from_github_sources.md
[9]
https://github.com/aws/aws-nitro-enclaves-cli/blob/main/examples/x86_64/hello/README.md
Dorjoy Chowdhury (6):
machine/nitro-enclave: New machine type for AWS Nitro Enclaves
machine/nitro-enclave: Add vhost-user-vsock device
device/virtio-nsm: Support for Nitro Secure Mod
/en/latest/
Signed-off-by: Dorjoy Chowdhury
---
MAINTAINERS | 10 +
hw/virtio/Kconfig|5 +
hw/virtio/cbor-helpers.c | 292 ++
hw/virtio/meson.build|4 +
hw/virtio/virtio-nsm-pci.c | 73 ++
hw/virtio/virtio-nsm.c
On Fri, Aug 16, 2024 at 6:58 PM Daniel P. Berrangé wrote:
>
> On Fri, Aug 16, 2024 at 06:50:34PM +0600, Dorjoy Chowdhury wrote:
> > Hi Daniel,
> >
> > On Mon, Aug 12, 2024 at 8:07 PM Daniel P. Berrangé
> > wrote:
> > >
> > > On Sat, Aug 10,
1 - 100 of 129 matches
Mail list logo
