On 12/6/18 3:22 AM, Kirill A. Shutemov wrote: >> When you say "disable encryption to a page" does the encryption get >> actually disabled or does the CPU just decrypt it transparently i.e. >> what happens physically? > Yes, it gets disabled. Physically. It overrides TME encryption. I know MKTME itself has a runtime overhead and we expect it to have a performance impact in the low single digits. Does TME have that overhead? Presumably MKTME plus no-encryption is not expected to have the overhead. We should probably mention that in the changelogs too.