On Wed, Jan 05, 2022 at 11:43:25AM +0000, Dr. David Alan Gilbert wrote:

There's more than one type of dance;

So Brijesh and I talked about this a bit yesterday. There's all kinds of
dances...

this partially varies depending on the system (SEV/TDX etc)

By "SEV" I guess you mean pre-SNP because SNP attestation is reportedly
much better.

TDX I'm being told is not interested in something like that atm. I guess
they wanna do something different wrt attestation.

So what we're talking about here is pre-SNP attestation, AFAICT.

and also depends on how you depend to boot your VM (separate kernel
or VM disk). Also it's important to note that when the dance happens
varies - in SEV and SEV-ES this happens before the guest executes any
code. So at the end of the dance, the guest owner hands over that
secret - but only then does the geust start booting;

Right.

that secret has to go somewhere to be used by something later. For
example, something might pull out that key and use it to decrypt a
disk that then has other secrets on it (e.g. your ssh key).

That is the other example I heard about.

So, to sum up: this looks like part of a pre-SNP attestation flow, i.e.,
for SEV and SEV-ES guests.

Follow-up question: is this going to be used by other cloud vendors too?
Or am I gonna get another implementation of sharing secrets with a guest
which is just a little bit different but sender #2 can't use this one
because raisins?

Because that would not be good.

So, is this what cloud vendors using SEV/-ES guests would like to use
and what they all agree upon?

Thx.

-- 
Regards/Gruss,
    Boris.

SUSE Software Solutions Germany GmbH, GF: Ivo Totev, HRB 36809, AG Nürnberg