From: Tom Lendacky <thomas.lendacky@...> BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=3275 The RMPADJUST instruction will be used by the SEV-SNP guest to modify the RMP permissions for a

BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=3275 The PVALIDATE instruction validates or rescinds validation of a guest page RMP entry. Upon completion, a return code is stored in EAX,

From: Tom Lendacky <thomas.lendacky@...> BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=3275 Version 2 of GHCB introduces NAE for creating AP when SEV-SNP is enabled in the guest VM. See the

BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=3275 The Page State Change NAE exit will be used by the SEV-SNP guest to request a page state change using the GHCB protocol. See the GHCB spec

BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=3275 An SEV-SNP guest is required to perform the GHCB GPA registration. See the GHCB specification for further details. Cc: Min Xu

BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=3275 Version 2 of GHCB introduces advertisement of features that are supported by the hypervisor. See the GHCB spec section 2.2 for an additional

BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=3275 Define the SEV-SNP MSR bits. Cc: Min Xu <min.m.xu@...> Cc: Tom Lendacky <thomas.lendacky@...> Cc: Ard Biesheuvel

BZ: https://bugzilla.tianocore.org/show_bug.cgi?id=3275 Version 2 of the GHCB spec introduces several new SNP-specific NAEs. Unfortunately, the names for those NAEs break the alignment. Add

This series is taken from the SNP RFC. This series defines the GHCBv2 macros and NAE events. Additionally, it also introduces a helper to clear the page encryption mask from the Mmio region. The

Hello Pierre, SOB is not an attribution of authorship, it is a statement made by the person contributing the patch asserting that the contribution complies with the license. IOW, you can keep the

I don't maintain any of the packages involved, but the changes look fine to me. Acked-by: Ard Biesheuvel <ardb@...>

If the spec is final, then extending the MdePkg patches makes sense, yes. Thanks Laszlo

Yes, I will keep patch#9 in SNP series. FYI, I will add couple of more patches in MdePkg to define the macros for AP creation and RMPAJUST instruction. Now that GHCB spec is final, we are working to

More precisely, that means patches 1-8 (because patch#9 should be replaced by the module-scope override, and also moved to just before what is currently patch#21). Other than that, I agree, this is a

AARCH64 support has been added to BaseRngLib via the optional ARMv8.5 FEAT_RNG. Refactor RngDxe to support AARCH64, note support for it in the VALID_ARCHITECTURES line of RngDxe.inf and enable it in

Make BaseRngLib more generic by moving x86 specific functionality from BaseRng.c into Rand/RdRand.c, and adding AArch64/Rndr.c, which supports the optional ARMv8.5 RNG instructions RNDR and RNDRRS

Update MdePkg BaseRngLib and SecurityPkg RngDxe to add support for the AARCH64 RNDR instruction. Changes from v1 to v2: o Added a PCD, gEfiSecurityPkgTokenSpaceGuid.PcdCpuRngSupportedAlgorithm to

Thanks Laszlo, I was not aware of the module-scope override. I will go with this approach and make sure it works after the inclusion of the VmgExitLib. Sounds good. What's your thought if I take out

The CI on github showed some coding style issues with this series. I will fix those locally but wait for more review comments before I send a v2. Thanks, Joey

From: Marc Moisson-Franckhauser <marc.moisson-franckhauser@...> Bugzilla: 3378 (https://bugzilla.tianocore.org/show_bug.cgi?id=3378) This new helper will not overwrite existing files, by