On Thu, 2018-12-06 at 14:22 +0300, Kirill A. Shutemov wrote: > When you say "disable encryption to a page" does the encryption get > > actually disabled or does the CPU just decrypt it transparently i.e. > > what happens physically? > > Yes, it gets disabled. Physically. It overrides TME encryption. OK, thanks for confirmation. BTW, how much is the penalty to keep it always enabled? Is it something that would not make sense for some other reasons? /Jarkko