lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Thu, 22 Sep 2016 14:49:22 -0500 From: Tom Lendacky <thomas.lendacky@....com> To: Borislav Petkov <bp@...e.de> CC: Paolo Bonzini <pbonzini@...hat.com>, Brijesh Singh <brijesh.singh@....com>, <simon.guinot@...uanux.org>, <linux-efi@...r.kernel.org>, <kvm@...r.kernel.org>, <rkrcmar@...hat.com>, <matt@...eblueprint.co.uk>, <linus.walleij@...aro.org>, <linux-mm@...ck.org>, <paul.gortmaker@...driver.com>, <hpa@...or.com>, <dan.j.williams@...el.com>, <aarcange@...hat.com>, <sfr@...b.auug.org.au>, <andriy.shevchenko@...ux.intel.com>, <herbert@...dor.apana.org.au>, <bhe@...hat.com>, <xemul@...allels.com>, <joro@...tes.org>, <x86@...nel.org>, <mingo@...hat.com>, <msalter@...hat.com>, <ross.zwisler@...ux.intel.com>, <dyoung@...hat.com>, <jroedel@...e.de>, <keescook@...omium.org>, <toshi.kani@....com>, <mathieu.desnoyers@...icios.com>, <devel@...uxdriverproject.org>, <tglx@...utronix.de>, <mchehab@...nel.org>, <iamjoonsoo.kim@....com>, <labbott@...oraproject.org>, <tony.luck@...el.com>, <alexandre.bounine@....com>, <kuleshovmail@...il.com>, <linux-kernel@...r.kernel.org>, <mcgrof@...nel.org>, <linux-crypto@...r.kernel.org>, <akpm@...ux-foundation.org>, <davem@...emloft.net> Subject: Re: [RFC PATCH v1 09/28] x86/efi: Access EFI data as encrypted when SEV is active On 09/22/2016 02:11 PM, Borislav Petkov wrote: > On Thu, Sep 22, 2016 at 02:04:27PM -0500, Tom Lendacky wrote: >> That's not what I mean here. If the BIOS sets the SMEE bit in the >> SYS_CFG msr then, even if the encryption bit is never used, there is >> still a reduction in physical address space. > > I thought that reduction is the reservation of bits for the SME mask. > > What other reduction is there? There is a reduction in physical address space for the SME mask and the bits used to aid in identifying the ASID associated with the memory request. This allows for the memory controller to determine the key to be used for the encryption operation (host/hypervisor key vs. an SEV guest key). Thanks, Tom > >> Transparent SME (TSME) will be a BIOS option that will result in the >> memory controller performing encryption no matter what. In this case >> all data will be encrypted without a reduction in physical address >> space. > > Now I'm confused: aren't we reducing the address space with the SME > mask? > > Or what reduction do you mean? >
Powered by blists - more mailing lists