Re: [PATCH v2 2/2] virt: tdx-guest: Allocate Quote buffer dynamically
From: Kiryl Shutsemau
Date: Wed Jul 22 2026 - 08:08:21 EST
On Tue, Jul 21, 2026 at 04:43:57PM +0000, Edgecombe, Rick P wrote:
> BUT, is this number coming from the untrusted host or the TDX module? I cant
> find TDCS_QUOTE_MAX_SIZE in the docs.
I cannot find it too. Peter, any pointers where it is documented
publicly?
> If it is coming from the TDX module then
> we are not talking about security considerations at all. It's just a functional
> "do you want to know if things are failing". Not sure why this one would be
> special in that regard. If we think it will fail so often that we don't want a
> warning, then we probably need another solution.
Silent makes no sense to me. We are talking about attestation. If
attestation fails the TD is functionally dead: it cannot obtain secrets.
--
Kiryl Shutsemau / Kirill A. Shutemov