[PATCH v7 0/1] KVM: SEV: Add KVM_SEV_SNP_HV_REPORT_REQ command

From: Thomas Courrege

Date: Mon Mar 02 2026 - 09:49:08 EST



Overview
========
The SEV-SNP Firmware ABI allows the hypervisor to request an
attestation report via the SEV_CMD_SNP_HV_REPORT_REQ firmware command.

This allow KVM to expose more of AMD’s SEV‑SNP features.

It also allow developers to easily request attestation.
It could maybe be use by some cloud provider to easily provide an
attestation report through their API, in case the Guest doesn't respond
fast enough or even to compare the reports.

Testing
=======
For testing this via QEMU, please use the following tree:
https://github.com/Th0rOnDoR/qemu

Patch History
=============
v6 -> v7:
Rebase after 7.0 merge window

v5 -> v6:
Fix typos issues in documentation

v4 -> v5:
Set variables in reverse christmas tree order
Fix and clean the rsp_size logic

v3 -> v4:
Add newline in documentation to avoid a warning
Add base commit

v2 -> v3:
Add padding to structure, code format
Write back the full MSG_REPORT_RSP structure
Remove the memzero_explicit for the report

v1 -> v2:
Renaming, code format
Zeroes the report before returning


Any feedback is appreciated.

Thanks,
Thomas

Thomas Courrege (1):
KVM: SEV: Add KVM_SEV_SNP_HV_REPORT_REQ command

.../virt/kvm/x86/amd-memory-encryption.rst | 27 ++++++++
arch/x86/include/uapi/asm/kvm.h | 9 +++
arch/x86/kvm/svm/sev.c | 63 +++++++++++++++++++
drivers/crypto/ccp/sev-dev.c | 1 +
include/linux/psp-sev.h | 31 +++++++++
5 files changed, 131 insertions(+)


base-commit: 55365ab85a93edec22395547cdc7cbe73a98231b
--
2.53.0