The SPDM specification is also complex, with the 1.2.1 spec being almost 200 pages and the 1.3.0 spec being almost 250 pages long. As such we have the kernel parsing untrusted responses from a complex specification, which sounds like a possible exploit vector. As such this series implements a SPDM requester in Rust. This is very similar to Lukas' implementation [2]. This series applies on top of Lukas' tree [3] and is heavily based on Lukas' work. At build time a user can choose to use either the Rust of the C SPDM implementation. The two are interchangable, although you can only use one at a time. To help with maintaining compatibility it's designed in a way to match Lukas' design and the state struct stores the same information, although in a Rust struct instead of the original C one. The Rust implementation currently supports less features, but my end goal is to consolidate to a single Rust implementation eventually. That will probably have to wait until Rust in the kernel is no longer experimental as SPDM is looking to be an important feature to support for all platforms. This series is based on the latest rust-next tree. This seris depends on the Untrusted abstraction work [4]. This seris also depends on the recent bindgen support for static inlines [5]. The entire tree can be seen here: https://github.com/alistair23/linux/tree/alistair/spdm-rust based-on: https://lore.kernel.org/all/cover.1719771133.git.lukas@xxxxxxxxx/ based-on: https://lore.kernel.org/rust-for-linux/20240925205244.873020-1-benno.lossin@xxxxxxxxx/ based-on: https://lore.kernel.org/all/20241114005631.818440-1-alistair@xxxxxxxxxxxxx/ 1: https://www.dmtf.org/standards/spdm 2: https://lore.kernel.org/all/cover.1719771133.git.lukas@xxxxxxxxx/ 3: https://github.com/l1k/linux/commits/spdm-future/ 4: https://lore.kernel.org/rust-for-linux/20240925205244.873020-1-benno.lossin@xxxxxxxxx/ 5: https://lore.kernel.org/all/20241114005631.818440-1-alistair@xxxxxxxxxxxxx/ Alistair Francis (6): rust: bindings: Support SPDM bindings drivers: pci: Change CONFIG_SPDM to a dependency lib: rspdm: Initial commit of Rust SPDM lib: rspdm: Support SPDM get_version lib: rspdm: Support SPDM get_capabilities lib: rspdm: Support SPDM negotiate_algorithms MAINTAINERS | 6 + drivers/pci/Kconfig | 2 +- lib/Kconfig | 47 ++- lib/Makefile | 1 + lib/rspdm/Makefile | 11 + lib/rspdm/consts.rs | 123 +++++++ lib/rspdm/lib.rs | 146 +++++++++ lib/rspdm/req-sysfs.c | 174 ++++++++++ lib/rspdm/state.rs | 556 ++++++++++++++++++++++++++++++++ lib/rspdm/sysfs.rs | 27 ++ lib/rspdm/validator.rs | 301 +++++++++++++++++ rust/bindgen_static_functions | 4 + rust/bindings/bindings_helper.h | 2 + 13 files changed, 1384 insertions(+), 16 deletions(-) create mode 100644 lib/rspdm/Makefile create mode 100644 lib/rspdm/consts.rs create mode 100644 lib/rspdm/lib.rs create mode 100644 lib/rspdm/req-sysfs.c create mode 100644 lib/rspdm/state.rs create mode 100644 lib/rspdm/sysfs.rs create mode 100644 lib/rspdm/validator.rs -- 2.47.0
