On Tue, Jul 20, 2021, Brijesh Singh wrote:

On 7/20/21 11:28 AM, Sean Christopherson wrote:

quoted

Out of curiosity, why 4 VMPCKs?  It seems completely arbitrary.

I believe the thought process was by providing 4 keys it can provide
flexibility for each VMPL levels to use a different keys (if they wish). The
firmware does not care about the vmpl level during the guest request
handling, it just want to know which key is used for encrypting the payload
so that he can decrypt and provide the  response for it.

Ah, I forgot about VMPLs.  That makes sense.

Thanks!