Re: [PATCH v2 2/2] virt: tdx-guest: Allocate Quote buffer dynamically
Kiryl Shutsemau <[email protected]> Wed, 22 Jul 2026 13:00:35 +0100
| Newsgroups | dev.linux.lists.linux-coco,org.kernel.vger.kvm,org.kernel.vger.linux-kernel |
|---|---|
| Message-ID | <amCv00f5Q6QlztyY@thinkstation> |
On Tue, Jul 21, 2026 at 04:43:57PM +0000, Edgecombe, Rick P wrote: > BUT, is this number coming from the untrusted host or the TDX module? I cant > find TDCS_QUOTE_MAX_SIZE in the docs. I cannot find it too. Peter, any pointers where it is documented publicly? > If it is coming from the TDX module then > we are not talking about security considerations at all. It's just a functional > "do you want to know if things are failing". Not sure why this one would be > special in that regard. If we think it will fail so often that we don't want a > warning, then we probably need another solution. Silent makes no sense to me. We are talking about attestation. If attestation fails the TD is functionally dead: it cannot obtain secrets. -- Kiryl Shutsemau / Kirill A. Shutemov