Re: [Qemu-devel] [RFC PATCH v1 22/22] loader: reload bios image on ROM reset in SEV-enabled guest

[Paolo Bonzini]

On 14/09/2016 22:29, Brijesh Singh wrote:
>> Does the guest have to check the measured data (e.g. with a hash) too,
>> to check that it hasn't been tampered with outside the secure
>> processor's control?  Of course this would result in garbage written to
>> the modified page, but that might be a valid attack vector.
> 
> Guest does not need to check the measurement.

Can you explain why not?

Paolo