Re: [RFC 3/6] lib: rspdm: Initial commit of Rust SPDM
From: Bjorn Helgaas
Date: Fri Nov 22 2024 - 12:32:31 EST
On Fri, Nov 15, 2024 at 03:46:13PM +1000, Alistair Francis wrote:
> This is the initial commit of the Rust SPDM library. It is based on and
> compatible with the C SPDM library in the kernel (lib/spdm).
> +++ b/lib/Kconfig
> @@ -754,6 +754,23 @@ config SPDM
> in .config. Drivers selecting SPDM therefore need to also select
> any algorithms they deem mandatory.
>
> +config RSPDM
> + bool "Rust SPDM"
> + select CRYPTO
> + select KEYS
> + select ASYMMETRIC_KEY_TYPE
> + select ASYMMETRIC_PUBLIC_KEY_SUBTYPE
> + select X509_CERTIFICATE_PARSER
> + depends on SPDM = "n"
> + help
> + The Rust implementation of the Security Protocol and Data Model (SPDM)
> + allows for device authentication, measurement, key exchange and
> + encrypted sessions.
> +
> + Crypto algorithms negotiated with SPDM are limited to those enabled
> + in .config. Drivers selecting SPDM therefore need to also select
> + any algorithms they deem mandatory.
Maybe this (and config SPDM) should be tweaked to mention drivers that
*depend* on SPDM or RSPDM, since they no longer use "select"?
PCI_CMA, which currently depends on SPDM, doesn't really look like a
"driver", so maybe it should say "users of SPDM" or "features
depending on SPDM" or something?