On Tue, Jul 20, 2021, Brijesh Singh wrote: > > On 7/20/21 11:28 AM, Sean Christopherson wrote: > > Out of curiosity, why 4 VMPCKs? It seems completely arbitrary. > > > > I believe the thought process was by providing 4 keys it can provide > flexibility for each VMPL levels to use a different keys (if they wish). The > firmware does not care about the vmpl level during the guest request > handling, it just want to know which key is used for encrypting the payload > so that he can decrypt and provide the response for it. Ah, I forgot about VMPLs. That makes sense. Thanks!