Re: [PATCH RFC 00/20] attestation: Add a common subsystem and TDX support

[Jarkko Sakkinen]

On Sat, Oct 17, 2026 at 10:08:29PM +0300, Jarkko Sakkinen wrote:
> On Sat, Oct 17, 2026 at 10:06:08PM +0300, Jarkko Sakkinen wrote:
> > It has zero-copy data types for TPM2, it can interpret and present
> > both commands and response at the scale of the whole TCG spec, has
> > zero dependencies, does not allocate memory i.e. can point directly
> > into wire and is from the get go to be importable to an enclave
> > entry point, OS kernels and pre-boot firmware.
> 
> Enclave entry point would make sense if you wanted to do a vTPM.
> I.e. it is also fully symmetric when it comes to the end point.

Actually if we imagine tpm2-protocol as an alternative that would revert
at large portion of the work required otherwise. tpm2-protocol crate
gives you already capability to do whatever TPM commands.

The other part is really then just "early tis" and "early crb" drivers.

I'm not favoring Rust here or suggesting that but it is good to bring
also this angle.

How I would approach "full Rust" alternative would be to write clean TCG
only TIS and CRB drivers in Rust despite redundancy with the C code.
They have their role and at least would "light my fire" more than
fighting in the bushes with the legacy code, doesn't it?

Sorry for the extra response. Just flushing out the alts.

Br, Jarkko