On 06/27/2018 02:57 PM, Kirill A. Shutemov wrote: > On Tue, Jun 26, 2018 at 05:30:12PM +0000, Randy Dunlap wrote: >> On 06/26/2018 07:22 AM, Kirill A. Shutemov wrote: >>> Add new config option to enabled/disable Multi-Key Total Memory >>> Encryption support. >>> >>> MKTME uses MEMORY_PHYSICAL_PADDING to reserve enough space in per-KeyID >>> direct mappings for memory hotplug. >>> >>> Signed-off-by: Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx> >>> --- >>> arch/x86/Kconfig | 19 ++++++++++++++++++- >>> 1 file changed, 18 insertions(+), 1 deletion(-) >>> >>> diff --git a/arch/x86/Kconfig b/arch/x86/Kconfig >>> index fa5e1ec09247..9a843bd63108 100644 >>> --- a/arch/x86/Kconfig >>> +++ b/arch/x86/Kconfig >>> @@ -1523,6 +1523,23 @@ config ARCH_USE_MEMREMAP_PROT >>> def_bool y >>> depends on AMD_MEM_ENCRYPT >>> >>> +config X86_INTEL_MKTME >>> + bool "Intel Multi-Key Total Memory Encryption" >>> + select DYNAMIC_PHYSICAL_MASK >>> + select PAGE_EXTENSION >>> + depends on X86_64 && CPU_SUP_INTEL >>> + ---help--- >>> + Say yes to enable support for Multi-Key Total Memory Encryption. >>> + This requires an Intel processor that has support of the feature. >>> + >>> + Multikey Total Memory Encryption (MKTME) is a technology that allows >>> + transparent memory encryption in and upcoming Intel platforms. >> >> huh? Maybe drop the "and"? > > Ugh.. It has to be "an". an ... platform. or in upcoming Intel platforms. -- ~Randy
