On 12/6/18 5:55 PM, Huang, Kai wrote:

I think one usage of user-specified key is for NVDIMM, since CPU key
will be gone after machine reboot, therefore if NVDIMM is encrypted
by CPU key we are not able to retrieve it once shutdown/reboot, etc.

I think we all agree that the NVDIMM uses are really useful.

But, these patches don't implement that.  So, if NVDIMMs are the only
reasonable use case, we shouldn't merge these patches until we add
NVDIMM support.