Received: by 2002:a6b:500f:0:0:0:0:0 with SMTP id e15csp5171739iob; Mon, 9 May 2022 10:06:49 -0700 (PDT) X-Google-Smtp-Source: ABdhPJwvQfhHvwTOLogB8GMxdbJwHRIYnFt87u1mtfyrTH4ofDEc27L8E5/9gyHNfkBA+iAkI+Nj X-Received: by 2002:a05:6870:4990:b0:ee:533e:f1e1 with SMTP id ho16-20020a056870499000b000ee533ef1e1mr4905829oab.82.1652116009180; Mon, 09 May 2022 10:06:49 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1652116009; cv=none; d=google.com; s=arc-20160816; b=P2o+d33XkiwmlxzMW47SFoOKTj4uP+zqHeeiWh+gRKApA0T3bX61OJbwW86ps3AMI6 B8UI7qAsDJlNQht0ogdvnD/K5F3gQtWN1N5XcqwXt8f+mHrR+vX9GhHpl9wNnftDSrN2 lktL48Bwkrtu2Su4qrgh7CTqCciWDYxpCe1zqgxj0fa/3U81cskxdBmTvus2RMGNxZxn SBNKnQ3al9q1Gk++XLGscm+lGuY/PgfBDEH2o7e4cf7dLmAuuGvxNW29Fv0RAo+FIdMl i7AD5Hya1zTO4zXp/R/Cgqe9BAbPw9lmPh8uL62dGd91+HwIZ1cRyFlbeG/aqSxUFmya 6uWQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:in-reply-to:content-disposition:mime-version :references:message-id:subject:cc:to:from:date:dkim-signature; bh=7lpb50R3zwIu2G3tyk1yvdZ54QsxXH26Abyw68QhTVY=; b=mjh1Ir9FbvQCe+Ei2Ro9l4QGYXxZmvrrrH04+iyvw6D50G8cl5/dIXf81jE7cVdZ++ YHKLBdnjxfwLUU+G7YF3KuhdfCpjY+nlLhLCFP5CO9mCqVOR/ldAYF92Bdx79R9qSIUO nIoMulu8QH8Pa9Bd1NDL5eqa09W5r1EYvXftey41zsrFZ8dH7c5WXInihpVNLGpmSLDt fdK+fVSc1eI8wXzu2OtaRar6k/rIoM5NDe4KU9trVYHcP4CKRHkSCp4jpkEMZDoC59DD XIMtquElq4JqmwmnOuPvcptcRBrcGIo83lIJh+1Lb9JujTWNFa775YlyESPQmZKFyk6k dxBQ== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@alien8.de header.s=dkim header.b=kZ2vb5Dq; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=alien8.de Return-Path: Received: from lindbergh.monkeyblade.net (lindbergh.monkeyblade.net. [2620:137:e000::1:18]) by mx.google.com with ESMTPS id o19-20020a056870969300b000e92ba7d8fesi12018147oaq.265.2022.05.09.10.06.48 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 09 May 2022 10:06:49 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:18 as permitted sender) client-ip=2620:137:e000::1:18; Authentication-Results: mx.google.com; dkim=pass header.i=@alien8.de header.s=dkim header.b=kZ2vb5Dq; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=alien8.de Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by lindbergh.monkeyblade.net (Postfix) with ESMTP id 8478D14043C; Mon, 9 May 2022 09:56:41 -0700 (PDT) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S239327AbiEIRAb (ORCPT + 99 others); Mon, 9 May 2022 13:00:31 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:41888 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S239333AbiEIRAQ (ORCPT ); Mon, 9 May 2022 13:00:16 -0400 Received: from mail.skyhub.de (mail.skyhub.de [IPv6:2a01:4f8:190:11c2::b:1457]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 365E914043C; Mon, 9 May 2022 09:56:14 -0700 (PDT) Received: from zn.tnic (p5de8eeb4.dip0.t-ipconnect.de [93.232.238.180]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.skyhub.de (SuperMail on ZX Spectrum 128k) with ESMTPSA id 05F011EC04A9; Mon, 9 May 2022 18:56:09 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alien8.de; s=dkim; t=1652115369; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:in-reply-to:in-reply-to: references:references; bh=7lpb50R3zwIu2G3tyk1yvdZ54QsxXH26Abyw68QhTVY=; b=kZ2vb5Dq0zLAVqs6/OU7hsQVgPdPmhmTE+pGDaSjnXrI6Y9slOcw6gqWXpuJ+0VMWDHAVO vDDuIpxJGsgINtJM1RTIoAsXDDBnIlMkklVQLFUwPOGkuhSAfsm+OhpX6THsEGK5MxDYyy LTCFprBt9z25m1YiEoL+ZEtIBJ8GMe8= Date: Mon, 9 May 2022 18:56:15 +0200 From: Borislav Petkov To: "Luck, Tony" Cc: "hdegoede@redhat.com" , "markgross@kernel.org" , "tglx@linutronix.de" , "mingo@redhat.com" , "dave.hansen@linux.intel.com" , "x86@kernel.org" , "hpa@zytor.com" , "corbet@lwn.net" , "gregkh@linuxfoundation.org" , "andriy.shevchenko@linux.intel.com" , "Joseph, Jithu" , "Raj, Ashok" , "rostedt@goodmis.org" , "Williams, Dan J" , "linux-kernel@vger.kernel.org" , "linux-doc@vger.kernel.org" , "platform-driver-x86@vger.kernel.org" , "patches@lists.linux.dev" , "Shankar, Ravi V" Subject: Re: [PATCH v7 06/12] platform/x86/intel/ifs: Check IFS Image sanity Message-ID: References: <20220506014035.1173578-1-tony.luck@intel.com> <20220506225410.1652287-1-tony.luck@intel.com> <20220506225410.1652287-7-tony.luck@intel.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: X-Spam-Status: No, score=-2.0 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,RDNS_NONE,SPF_HELO_NONE,T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Mon, May 09, 2022 at 04:51:56PM +0000, Luck, Tony wrote: > The checksum is just a "did this file get corrupted check". The file contains > SHA256 checksums for each of the chunks. These checksums are digitally > signed. Checking of these is done by microcode when the file is loaded into > BIOS reserved memory (where it is inaccessible to OS and I/O). That sounds like something I was hoping to hear, good. :-) Thx. -- Regards/Gruss, Boris. https://people.kernel.org/tglx/notes-about-netiquette