Re: [RFC PATCH v1 09/28] x86/efi: Access EFI data as encrypted when SEV is active
From: Borislav Petkov <hidden>
Date: 2016-09-22 20:10:57
Also in:
kvm, linux-efi, linux-mm, lkml
From: Borislav Petkov <hidden>
Date: 2016-09-22 20:10:57
Also in:
kvm, linux-efi, linux-mm, lkml
On Thu, Sep 22, 2016 at 02:49:22PM -0500, Tom Lendacky wrote:
quoted
I thought that reduction is the reservation of bits for the SME mask. What other reduction is there?There is a reduction in physical address space for the SME mask and the bits used to aid in identifying the ASID associated with the memory request. This allows for the memory controller to determine the key to be used for the encryption operation (host/hypervisor key vs. an SEV guest key).
Ok, I think I see what you mean: you call SME mask the bit in CPUID
Fn8000_001F[EBX][5:0], i.e., the C-bit, i.e. sme_me_mask. And the other
reduction is the key ASID, i.e., CPUID Fn8000_001F[EBX][11:6], i.e.
sme_me_loss.
I think we're on the same page - I was simply calling everything SME
mask because both are together in the PTE:
"Additionally, in some implementations, the physical address size of the
processor may be reduced when memory encryption features are enabled,
for example from 48 to 43 bits."
--
Regards/Gruss,
Boris.
SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg)
--
--
To unsubscribe, send a message with 'unsubscribe linux-mm' in
the body to majordomo@kvack.org. For more info on Linux MM,
see: http://www.linux-mm.org/ .
Don't email: <a href=mailto:"dont@kvack.org"> email@kvack.org </a>