linux-kernel - Re: [RFC PATCH v1 00/28] x86: Secure Encrypted Virtualization (AMD)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date:   Fri, 26 Aug 2016 10:38:03 -0500
From:   Brijesh Singh <brijesh.singh@....com>
To:     "Liuchunyan (Chunyan, EULER)" <liuchunyan9@...wei.com>
CC:     "linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>
Subject: Re: [RFC PATCH v1 00/28] x86: Secure Encrypted Virtualization (AMD)



> Is there any production hardware supporting SEV? Which one? We
>
> are interested to do some test.
>
SEV support is not available in production hardware's. SEV support will 
be available in future AMD hardware's.


>
>
> And, generally, I have a question about container protection. In
>
> white paper and also current KVM forum slides, it’s said this feature
>
> can protect containers from each other. If it could, it’s great! But I
>
> am not sure: the containers must be in a sandbox/VM? (that means,
>
> still need a virtualized environment). How about Common containers
>
> running directly on host OS?
>

SEV is integrated with existing AMD-V technology and can be used to 
provide additional security of containers when running inside VM.