On Wed, Dec 05, 2018 at 08:32:52PM +0000, Sakkinen, Jarkko wrote: > On Tue, 2018-12-04 at 12:46 +0300, Kirill A. Shutemov wrote: > > On Tue, Dec 04, 2018 at 09:25:50AM +0000, Peter Zijlstra wrote: > > > On Mon, Dec 03, 2018 at 11:39:47PM -0800, Alison Schofield wrote: > > > > (Multi-Key Total Memory Encryption) > > > > > > I think that MKTME is a horrible name, and doesn't appear to accurately > > > describe what it does either. Specifically the 'total' seems out of > > > place, it doesn't require all memory to be encrypted. > > > > MKTME implies TME. TME is enabled by BIOS and it encrypts all memory with > > CPU-generated key. MKTME allows to use other keys or disable encryption > > for a page. > > When you say "disable encryption to a page" does the encryption get > actually disabled or does the CPU just decrypt it transparently i.e. > what happens physically? Yes, it gets disabled. Physically. It overrides TME encryption. -- Kirill A. Shutemov
