Received: by 2002:a05:7412:bbc7:b0:fc:a2b0:25d7 with SMTP id kh7csp462265rdb; Thu, 1 Feb 2024 13:51:19 -0800 (PST) X-Google-Smtp-Source: AGHT+IH1YNMtXKiM87FGIvyTZ2TGVPYRbo7/gOCiTj8L0MKncHRpStYIiTodhsbFb8Q/EQSvTvfk X-Received: by 2002:aa7:df81:0:b0:55f:acb3:f9e1 with SMTP id b1-20020aa7df81000000b0055facb3f9e1mr34952edy.28.1706824279592; Thu, 01 Feb 2024 13:51:19 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1706824279; cv=pass; d=google.com; s=arc-20160816; b=wG/j5fXAYU1u5o5M9Su2A1wdLErgINP3jCjRSQPaH8f2sMUe4/QF8MKORVZ97jb+9o 8z+7mYsMiNX25XGpdM4QBcyDBIs+x70LcNGQWnRyo4uzxeZg6LWHdSmCEZjVl0Krgsms 5CtkzXb/P4f3lj498/XRsLd7EO//TkfLP6iAO8ZjOJAX1gd+bLPJCBrtrQYU4s+OLfQu /WvW3DG4a5Hzo0k0k/n80IG9Xc9/h5WOGhx6Zp93qn8HWUZV98B1CdvBw/f2kvI1JJ7c RIg+Dew7Eu0JmnG/1QioRCXmf0FG+0GGWYE3DrNTtK2HvYXpa60/HwUiC37fJr9R5i2W YLrw== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=mime-version:list-unsubscribe:list-subscribe:list-id:precedence :user-agent:content-transfer-encoding:organization:references :in-reply-to:date:cc:to:reply-to:from:subject:message-id :dkim-signature; bh=Crd3dJgXe4fYUS6yZk7Jg/OJoQ9gKfrffjshj7lAM8A=; fh=3WgJYw1eGLitwTiA4oRTYs9YqCTl1jCL9vgEzQ/giic=; b=SvJQ6qetilMO2owldjvIxoU14HFZ4Ai73UHjL4KMaewQpLd9uU89tXlTeUBmL1zSAc iCrWRXZgqfhUqdh51jjY2/ZZ5UorzUpb8KKL6eMaGoKPh08C0uoyFW77Zd4yzVxYjArS URd9QUfx9ZAjtn1upygpncY3SNw29Ti8oX7TO7lMhX9HBjclaQpX5aFFXeH16l3V1+i0 vjK+AJN+UKX+NGrzZkM/uAx/mZvCN2eir9VyFPyGgk8DRpCfWC8bfRe5F9q14m2Hhs+r vMeSqyJR7oLIlp80j9rOippR1VmPQyW1DpgFkfSCa/teF7xcQjURRQNWQQWR5DQTZroy k6zg==; dara=google.com ARC-Authentication-Results: i=2; mx.google.com; dkim=pass header.i=@intel.com header.s=Intel header.b=ZVIcQ1j4; arc=pass (i=1 dkim=pass dkdomain=intel.com dmarc=pass fromdomain=linux.intel.com); spf=pass (google.com: domain of linux-kernel+bounces-48546-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:4601:e00::3 as permitted sender) smtp.mailfrom="linux-kernel+bounces-48546-linux.lists.archive=gmail.com@vger.kernel.org"; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=intel.com X-Forwarded-Encrypted: i=1; AJvYcCUIGegEARMzs6vwst+D5Sul43/QkMyf4zhfwv3DIrJDnRP3tMAxSPpBE/fkgvDvs/Apx1fj5rBSLL2yaR7jf2PS0SIFg8S/NLu5NeLLbw== Return-Path: Received: from am.mirrors.kernel.org (am.mirrors.kernel.org. [2604:1380:4601:e00::3]) by mx.google.com with ESMTPS id g21-20020aa7d1d5000000b0055cda99713asi200756edp.136.2024.02.01.13.51.19 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Thu, 01 Feb 2024 13:51:19 -0800 (PST) Received-SPF: pass (google.com: domain of linux-kernel+bounces-48546-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:4601:e00::3 as permitted sender) client-ip=2604:1380:4601:e00::3; Authentication-Results: mx.google.com; dkim=pass header.i=@intel.com header.s=Intel header.b=ZVIcQ1j4; arc=pass (i=1 dkim=pass dkdomain=intel.com dmarc=pass fromdomain=linux.intel.com); spf=pass (google.com: domain of linux-kernel+bounces-48546-linux.lists.archive=gmail.com@vger.kernel.org designates 2604:1380:4601:e00::3 as permitted sender) smtp.mailfrom="linux-kernel+bounces-48546-linux.lists.archive=gmail.com@vger.kernel.org"; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=intel.com Received: from smtp.subspace.kernel.org (wormhole.subspace.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by am.mirrors.kernel.org (Postfix) with ESMTPS id 2B7E61F251A5 for ; Thu, 1 Feb 2024 16:42:52 +0000 (UTC) Received: from localhost.localdomain (localhost.localdomain [127.0.0.1]) by smtp.subspace.kernel.org (Postfix) with ESMTP id 550FB5255; Thu, 1 Feb 2024 16:42:38 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=intel.com header.i=@intel.com header.b="ZVIcQ1j4" Received: from mgamail.intel.com (mgamail.intel.com [192.198.163.9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id D85F13FFE; Thu, 1 Feb 2024 16:42:35 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=192.198.163.9 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1706805757; cv=none; b=agQRx+aIJdg+uxHIF/WW/ePtdE4JvZdAm5L2z2nQzy5Lm5JE1OkLiKZYWceW/Qtj/Tn1JcNQuP53vl0NR/c/owXqLMCukKHYRIAYOESIR3VV6UdUSdOkqf1AOBVmq/1jvfywBR41Lakxhn2CYYGAdd+/1BgnT8V6XYbFNr/DM7A= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1706805757; c=relaxed/simple; bh=Crd3dJgXe4fYUS6yZk7Jg/OJoQ9gKfrffjshj7lAM8A=; h=Message-ID:Subject:From:To:Cc:Date:In-Reply-To:References: Content-Type:MIME-Version; b=NMHyyZkZO7CDB6dFLXEC7mqlExncos/maMKcQMu9X4D+6UWML7uB1cTRNcs/0V4/6I/PveIctTO8cIQQYyhsuYoNdVdV1HhaK9bEADbS3kGRUXlT6TL+ln54l2LwTFeKIyqDM0aMwjRmQa+lHSjKhRMF5wtho2jaT0Ww2Sgkv5s= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=linux.intel.com; spf=none smtp.mailfrom=linux.intel.com; dkim=pass (2048-bit key) header.d=intel.com header.i=@intel.com header.b=ZVIcQ1j4; arc=none smtp.client-ip=192.198.163.9 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=linux.intel.com Authentication-Results: smtp.subspace.kernel.org; spf=none smtp.mailfrom=linux.intel.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=intel.com; i=@intel.com; q=dns/txt; s=Intel; t=1706805756; x=1738341756; h=message-id:subject:from:reply-to:to:cc:date:in-reply-to: references:content-transfer-encoding:mime-version; bh=Crd3dJgXe4fYUS6yZk7Jg/OJoQ9gKfrffjshj7lAM8A=; b=ZVIcQ1j4wLvA1kpqAyDL2PaYQFti0RlU5QiS7hxb7wmv1ProZb/MKQ/e 8WcfUPGX2U2na3Bq5l0+8n1Be8IGVfqKZmB87MnVNG1bgp1ePZzxW+dHL a0C9SIliP/ZFEK3zUIPHNV3fPxjJsbYAfyHs3XnzFx4Of1eNE3IL6AUKN pcMPcvQ6xiQwE2f9BdzzspVtPbpcEnm19Je9Men60pK/quY6/4ggIgHFv IXV8NbdmlHs6DOpjKOmwYi4dnJo2jsSqEEXFRA3nc0HCGey2kXrk1qX/5 maDE1rTQQatYSS1QCSuONyYRd3i4+GkiKQENQg7d/QKY2kyItQyqFvhNY A==; X-IronPort-AV: E=McAfee;i="6600,9927,10969"; a="10688931" X-IronPort-AV: E=Sophos;i="6.05,234,1701158400"; d="scan'208";a="10688931" Received: from fmviesa005.fm.intel.com ([10.60.135.145]) by fmvoesa103.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 01 Feb 2024 08:42:34 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="6.05,234,1701158400"; d="scan'208";a="4437860" Received: from linux.intel.com ([10.54.29.200]) by fmviesa005.fm.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 01 Feb 2024 08:42:34 -0800 Received: from ssigler-mobl.amr.corp.intel.com (unknown [10.209.41.165]) by linux.intel.com (Postfix) with ESMTP id 16F6F580D28; Thu, 1 Feb 2024 08:42:34 -0800 (PST) Message-ID: <94a61858ac82ceaac1ef8ae41067ae7356512d7d.camel@linux.intel.com> Subject: Re: [PATCH 4/8] platform/x86/intel/sdsi: Add netlink SPDM transport From: "David E. Box" Reply-To: david.e.box@linux.intel.com To: Jiri Pirko Cc: netdev@vger.kernel.org, ilpo.jarvinen@linux.intel.com, sathyanarayanan.kuppuswamy@linux.intel.com, linux-kernel@vger.kernel.org, platform-driver-x86@vger.kernel.org Date: Thu, 01 Feb 2024 08:42:33 -0800 In-Reply-To: References: <20240201010747.471141-1-david.e.box@linux.intel.com> <20240201010747.471141-5-david.e.box@linux.intel.com> Organization: David E. Box Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable User-Agent: Evolution 3.44.4-0ubuntu2 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Hi Jiro, Thanks for your comments. On Thu, 2024-02-01 at 10:26 +0100, Jiri Pirko wrote: > Thu, Feb 01, 2024 at 02:07:43AM CET, david.e.box@linux.intel.com=C2=A0wro= te: >=20 > [...] >=20 >=20 > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 - > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 name: spdm-req > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 type: binary > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 - > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 name: spdm-rsp > > +=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 type: binary >=20 > I don't understand the need to use netlink for this. Basically what you > do is you just use it to pass binary blobs to and from FW. > Advantages, like well-defined attributes, notifications etc, for which > it makes sense to use Netlink are not utilized at all. SPDM supports the setup of a secure channel between the responder and reque= stor using TLS based encryption algorthms. While this is just a transport for th= ose blobs, netlink seemed an appropriate interface for this type of communicati= on. The binary blobs can instead be broken out into the SPDM protocol messages, right out of the spec. But for our needs this would still just define the protocol. The algorithms themselves are not handled by the driver. > Also, I don't thing it is good idea to have hw-driver-specific genl > family. I'm not aware of anything like that so far. Leave netlink > for use of generic and abstracted APIs. Sounds like an implied rule. If so should it be documented somewhere? >=20 > Can't you just have a simple misc device for this? It wouldn't be too much work to convert it. David