On Tue, 2018-12-04 at 12:46 +0300, Kirill A. Shutemov wrote: > On Tue, Dec 04, 2018 at 09:25:50AM +0000, Peter Zijlstra wrote: > > On Mon, Dec 03, 2018 at 11:39:47PM -0800, Alison Schofield wrote: > > > (Multi-Key Total Memory Encryption) > > > > I think that MKTME is a horrible name, and doesn't appear to accurately > > describe what it does either. Specifically the 'total' seems out of > > place, it doesn't require all memory to be encrypted. > > MKTME implies TME. TME is enabled by BIOS and it encrypts all memory with > CPU-generated key. MKTME allows to use other keys or disable encryption > for a page. When you say "disable encryption to a page" does the encryption get actually disabled or does the CPU just decrypt it transparently i.e. what happens physically? > But, yes, name is not good. /Jarkko
