1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
|
#pragma once
#include "util.h"
#include <stdint.h>
#include <stdlib.h>
enum { WITH, WITHOUT };
enum {
GSTATE_UNINIT,
GSTATE_LUPDATE,
GSTATE_LSECRET,
GSTATE_RUNNING,
GSTATE_SUPDATE,
GSTATE_RUPDATE,
GSTATE_SENT
};
struct kvm {
int fd, vmfd, vcpufd;
void *mem;
size_t memsize, runsize;
struct kvm_run *run;
};
struct guest {
void *code;
size_t code_size;
size_t mem_size;
};
const char *sev_fwerr_str(int code);
const char *sev_gstate_str(int code);
int sev_ioctl(int vmfd, int cmd, void *data, int *error);
void sev_get_measure(int vmfd);
uint8_t sev_guest_state(int vmfd, uint32_t handle);
void sev_dbg_decrypt(int vmfd, void *src, void *dst, size_t size);
uint64_t sev_dbg_decrypt_rip(int vmfd);
void snp_dbg_decrypt(int vmfd, void *src, void *dst, size_t size);
uint64_t snp_dbg_decrypt_rip(int vmfd);
void guest_init(struct guest *guest, const char *filename);
void guest_deinit(struct guest *guest);
void kvm_init(struct kvm *kvm, struct guest *guest);
void sev_kvm_init(struct kvm *kvm, struct guest *guest);
void sev_es_kvm_init(struct kvm *kvm, struct guest *guest);
void sev_snp_kvm_init(struct kvm *kvm, struct guest *guest);
void kvm_deinit(struct kvm *kvm);
void parse_vmtype(int argc, const char **argv);
uint64_t vm_get_rip(struct kvm *kvm);
void vm_init(struct kvm *kvm, struct guest *guest);
void vm_deinit(struct kvm *kvm);
void kvm_setup_init(void);
void kvm_setup_deinit(void);
extern int kvm_dev, sev_dev;
extern const char *vmtype;
|