linux-kernel - Re: [PATCH 00/15] kasan: x86: arm64: risc-v: KASAN tag-based mode for x86

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <3dcf7631-d839-7235-10c7-30f80d7f796a@gentwo.org>
Date: Wed, 5 Feb 2025 10:59:10 -0800 (PST)
From: "Christoph Lameter (Ampere)" <cl@...two.org>
To: Dave Hansen <dave.hansen@...el.com>
cc: Maciej Wieczor-Retman <maciej.wieczor-retman@...el.com>, luto@...nel.org, 
    xin@...or.com, kirill.shutemov@...ux.intel.com, palmer@...belt.com, 
    tj@...nel.org, andreyknvl@...il.com, brgerst@...il.com, ardb@...nel.org, 
    dave.hansen@...ux.intel.com, jgross@...e.com, will@...nel.org, 
    akpm@...ux-foundation.org, arnd@...db.de, corbet@....net, 
    dvyukov@...gle.com, richard.weiyang@...il.com, ytcoode@...il.com, 
    tglx@...utronix.de, hpa@...or.com, seanjc@...gle.com, 
    paul.walmsley@...ive.com, aou@...s.berkeley.edu, justinstitt@...gle.com, 
    jason.andryuk@....com, glider@...gle.com, ubizjak@...il.com, 
    jannh@...gle.com, bhe@...hat.com, vincenzo.frascino@....com, 
    rafael.j.wysocki@...el.com, ndesaulniers@...gle.com, mingo@...hat.com, 
    catalin.marinas@....com, junichi.nomura@....com, nathan@...nel.org, 
    ryabinin.a.a@...il.com, dennis@...nel.org, bp@...en8.de, 
    kevinloughlin@...gle.com, morbo@...gle.com, dan.j.williams@...el.com, 
    julian.stecklina@...erus-technology.de, peterz@...radead.org, 
    kees@...nel.org, kasan-dev@...glegroups.com, x86@...nel.org, 
    linux-arm-kernel@...ts.infradead.org, linux-riscv@...ts.infradead.org, 
    linux-kernel@...r.kernel.org, linux-mm@...ck.org, llvm@...ts.linux.dev, 
    linux-doc@...r.kernel.org
Subject: Re: [PATCH 00/15] kasan: x86: arm64: risc-v: KASAN tag-based mode
 for x86

On Tue, 4 Feb 2025, Dave Hansen wrote:

> > Could we get support for that? This would allow us to enable tag checking
> > in production systems without performance penalty and no memory overhead.
>
> At least on the Intel side, there's no trajectory for doing something
> like the MTE architecture for memory tagging. The DRAM "ECC" area is in
> very high demand and if anything things are moving away from using ECC
> "bits" for anything other than actual ECC. Even the MKTME+integrity
> (used for TDX) metadata is probably going to find a new home at some point.
>
> This shouldn't be a surprise to anyone on cc here. If it is, you should
> probably be reaching out to Intel over your normal channels.

Intel was a competitor for our company and AFAICT has issues all over
the place with performance given its conservative stands on technology. But
we do not test against Intel anymore. Can someone from AMD say something?

MTE tagging is part of the processor standard for ARM64 and Linux will
need to support the 16 byte tagging feature one way or another even if
Intel does not like it. And AFAICT hardware tagging support is a critical
security feature for the future.