Re: [PATCH v2 2/2] virt: tdx-guest: Allocate Quote buffer dynamically

Kiryl Shutsemau <[email protected]> Wed, 22 Jul 2026 13:00:35 +0100
Newsgroups dev.linux.lists.linux-coco,org.kernel.vger.kvm,org.kernel.vger.linux-kernel
Message-ID <amCv00f5Q6QlztyY@thinkstation>
On Tue, Jul 21, 2026 at 04:43:57PM +0000, Edgecombe, Rick P wrote:
> BUT, is this number coming from the untrusted host or the TDX module? I cant
> find TDCS_QUOTE_MAX_SIZE in the docs.

I cannot find it too. Peter, any pointers where it is documented
publicly?

> If it is coming from the TDX module then
> we are not talking about security considerations at all. It's just a functional
> "do you want to know if things are failing". Not sure why this one would be
> special in that regard. If we think it will fail so often that we don't want a
> warning, then we probably need another solution.

Silent makes no sense to me. We are talking about attestation. If
attestation fails the TD is functionally dead: it cannot obtain secrets.

-- 
  Kiryl Shutsemau / Kirill A. Shutemov