From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S966454AbcIVTEw (ORCPT ); Thu, 22 Sep 2016 15:04:52 -0400 Received: from mail-co1nam03on0071.outbound.protection.outlook.com ([104.47.40.71]:24544 "EHLO NAM03-CO1-obe.outbound.protection.outlook.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S936161AbcIVTEm (ORCPT ); Thu, 22 Sep 2016 15:04:42 -0400 Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=Thomas.Lendacky@amd.com; Subject: Re: [RFC PATCH v1 09/28] x86/efi: Access EFI data as encrypted when SEV is active To: Borislav Petkov , Paolo Bonzini References: <147190820782.9523.4967724730957229273.stgit@brijesh-build-machine> <147190832511.9523.10850626471583956499.stgit@brijesh-build-machine> <20160922143545.3kl7khff6vqk7b2t@pd.tnic> <464461b7-1efb-0af1-dd3e-eb919a2578e9@redhat.com> <20160922145947.52v42l7p7dl7u3r4@pd.tnic> <938ee0cf-85e6-eefa-7df9-9d5e09ed7a9d@redhat.com> <20160922170718.34d4ppockeurrg25@pd.tnic> CC: Brijesh Singh , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , From: Tom Lendacky Message-ID: <1a22afee-a146-414c-6f58-66a942f7aab9@amd.com> Date: Thu, 22 Sep 2016 14:04:27 -0500 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.2.0 MIME-Version: 1.0 In-Reply-To: <20160922170718.34d4ppockeurrg25@pd.tnic> Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit X-Originating-IP: [165.204.77.1] X-ClientProxiedBy: YQXPR01CA0024.CANPRD01.PROD.OUTLOOK.COM (10.165.102.162) To CY4PR12MB1141.namprd12.prod.outlook.com (10.168.163.149) X-MS-Office365-Filtering-Correlation-Id: c47a23dd-f2ef-4629-6a56-08d3e31b4d60 X-Microsoft-Exchange-Diagnostics: 1;CY4PR12MB1141;2:EzYaUmqbjfwVxc00jQnD4rTDqTpmtaVqt1hPIWgKnqS3hJaEEgTw7xNpWzKXkZzTVukl8RJjMNDwrrQlmOUAdsHKyF8TWqLeUw7razABncP9v1Y0SvGHaqh+VG3TTYNjEbMGFO+Nn865dFe4FEZkT4ikPuR9qgFiS/rfTuLtht4JQ7MECf6jmOWE8ylV59rN;3:/VwcvIN9XGqAN9TKt9CofH76cxvCUq1AOpA+jzfeWCe0nOUs6sBSFhQOytiXLF/dAyt5YJrTcrxZepWYN75rqff+X3fIARQMDWgX0FR/AgDhjxsikWNkmu6GQrWO7bGk;25:ymB6y9DAujWIZsEi2+3sGwD7qOh9FYKmvIaWI00jHxamB+a4/CiN4LwCuLHEZ7LcAj1CMRuk/BHRBpLeKQV30UxVkiOIXdLRHSFNDy1cSS1X1cF0a3fIYY1GAY8rwd/zrFcxBmYpPG0vhoX9cQ6dJKalFHGG7yA9R0eIgdIgc5+hfkfXtmZVjJl2D31pOyrPlT8lDu25X7jQjPs8BY8boX0teAdiC2xZhdkZb9yj2CKPnTIAWPiDYP0CKhgzbb54PzjzC0rEPhAZvBzzJZvuHNMvpfUH4MHn0tm8ISAowkD0bYX665lt3ci5hVw5nKnRMZKYjRb4To6knbdCjSEJuFdDUmJsgbTsxIkcIzHw2ISdIxUtpokDXpZtKmi2TjrDy4T4BWtdzQzolfYu982YKlC4myBeVZnW3hg4EKqklbA= X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:CY4PR12MB1141; X-Microsoft-Exchange-Diagnostics: 1;CY4PR12MB1141;31:fqjAbna8nrQLu+znqMB2qXm0rUIIRf2MoQwTs3mlN8Bly5jtbqwgG3S/snvHN/Kbq2gngxVonxk6PMG7zqfCyRLoTBdzTeodWtXMaA+1kdMxCc1R7H3cG5h10Um5C7XLO8CqSXQnloIa0GfRHJRIrsrwit/y8GnMXRkg+zmJrh8NWN7ujeV5ks4GYpeIrMHJkpLIwa4DksHV0uWlsebD0yYaGzAjzOeuxCbyWeW5mg0=;20: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 X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:; X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(6040176)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6055026);SRVR:CY4PR12MB1141;BCL:0;PCL:0;RULEID:;SRVR:CY4PR12MB1141; X-Microsoft-Exchange-Diagnostics: 1;CY4PR12MB1141;4:m+zDFDdCbnV0eEMR/AhsUeYZUI+HeugkyeGLVUg9gjuxxWleNQsa5zrBssRRYjgCnNCKCpw00UBCOn2mgdAWH9fcbUidp2cPNR97mgNUPQhywEZTkcc1YGiDOpXP+WI6Fx2HO2Bvcn9ZSZOryXNpf638g84Uj4R4DvV9EwcajWF/IXaxHV/z7aRVqtFl0SnO7vepHpSQEt43AFUN2x0IDWc0PNCaYmzKGEF4pCrbb4B0I3TIkyoIInljRHhDYDhPfTI0qWO0Jtbk+g+Nd2Wq4PxVuosztVTXRTAQ7JQCAy/7m/nILtCoKRzL1x0EALKBIWOK/qJbo5FofiImST5ajAOUU3brTTRuJweBOflEj1sBU81BEh3PGrMN02aQEeR/iaRZfWElvkNe5YWcLhm4Dw== X-Forefront-PRVS: 0073BFEF03 X-Forefront-Antispam-Report: SFV:NSPM;SFS:(10009020)(4630300001)(6009001)(6049001)(7916002)(199003)(24454002)(189002)(377454003)(54356999)(50466002)(189998001)(76176999)(33646002)(50986999)(81156014)(68736007)(65806001)(4001350100001)(64126003)(97736004)(4326007)(92566002)(101416001)(42186005)(2950100001)(65956001)(36756003)(47776003)(7846002)(305945005)(7736002)(8676002)(81166006)(83506001)(66066001)(2906002)(3846002)(5001770100001)(6116002)(31696002)(230700001)(86362001)(65826007)(106356001)(586003)(31686004)(23676002)(5660300001)(105586002)(93886004)(7416002)(77096005)(7406005)(217873001);DIR:OUT;SFP:1101;SCL:1;SRVR:CY4PR12MB1141;H:[10.236.18.82];FPR:;SPF:None;PTR:InfoNoRecords;A:1;MX:1;LANG:en; X-Microsoft-Exchange-Diagnostics: =?utf-8?B?MTtDWTRQUjEyTUIxMTQxOzIzOlR1N091Mk5nZWdNQnpZNDFqVFkydlJXNEIw?= =?utf-8?B?bUhmQkFkZnNGYzNKTEhFVDNDQ2FMQzZ0VUF6RWtmMEhMMjRVOGZsL1kxdnhD?= =?utf-8?B?MHcwa29kc0EwWE1wK0c0V2pxa3ZJVFB0Z283VEpzZ3hoUUhuSE1qRy82NlNL?= =?utf-8?B?MVVvcXdWaG5ydUREc25XUnMvZ25ybDVUTXVoVEFpSWZvTk8wamIvTGhwby9y?= =?utf-8?B?M0pCTjdIc01uWEx6eVVORVYrZHM5S1dLd3pQSXoxWFlpM3JHMytGd0JubHFu?= =?utf-8?B?NGhpd2grRlJsd1NIcVh3T2ZsZ3NRWnVkdjhJYVB4aGg4U1l3NWU3bVF1eEw1?= =?utf-8?B?VkEwcEpNTnlLRDRya2VHcEpTZmJhaXh5b3BvS3I1eDR2QjN5dnQyT1VQTEg2?= =?utf-8?B?Y1NpWmExN0hrRS9xN29VakhXVzRKMnk5dEVuQ3lqSkZSU0MwNFBPMTFiSWtv?= =?utf-8?B?eElTNnhqZVAvU05MQmNQZGh2ckpQWTkwQy8rbGZ4SWViMXFUVzBqMFg3Y1Az?= =?utf-8?B?U1JRaktHNUZqNjlqejlhYmZKditsNDNMUmlTNmo0VHNiWHQwY005S0VSeGVJ?= =?utf-8?B?OHJUWUF1WTlqYWoxSW9PY0tvQ1Z1N0dEYmpFN1FaeWUvUnQyUUlja25KK1Jk?= =?utf-8?B?VW5DSWdBMUgrbWZWQVI2YjBsSExvVGx6L0hEL0p1TEtMajh0TFY2V3JVUUxK?= =?utf-8?B?MC8zM2trZXdzVE1kcnZQVWNtODRreXprVUtZOHJ1dGgrb2lwbC9hMGtZdHV5?= =?utf-8?B?K1JJUUhHVVVmQS93ZWZmbVBwMVp6UGFLRXd6VDdzd29zYitBcVBlQnM0MENV?= =?utf-8?B?NE5OckhYbmd5R0RWWkhncDdCdHl1RkJwWlpEZW43a01CVSt2T1NzNkU0NTg4?= =?utf-8?B?dlM0clZyOFNQbDlDaU84MS9Cc2pwSXZCN2c0enV5dFNmVEZOcHdMb1dCQ3I3?= =?utf-8?B?L09aS1R0dUh2a3BISVQwbjE1UmM4REFWOTZMdXRsWlVlcjJib2RBV0hDYThQ?= =?utf-8?B?WlRtRG9lZFJEN2dUeHV3NWpaRVU5VndWbVhEM1pCMDZwM0dQRmE4U2M3K0xn?= =?utf-8?B?d2ZUVzVjR2tiM1VUbzlaZHUvcUFsY1dVaERzYjZIZkZndTluWVdsY2lEY3pt?= =?utf-8?B?b2tpL0JPbEgzaHJTNXB0SzdVYTdRcVY2VmovY05yeVhNUFB2YTNTa2RDWnhv?= =?utf-8?B?R04yZVVSVEgzNUVSWEJPODVRMGt3NTlHWGk2Umc0VGhzVHdxY3kzZHIwVkFG?= =?utf-8?B?RlFLNkRZYXZpOVJGbTVPcFlVVVAwWjhEZk5rZ3c0bGpEeHgvNFRqek9aRjJP?= =?utf-8?B?Mi9LZWg3L01weUl6RVJzcXV5SEdGR1ppckxjWm5heEtyd1MxVlA0K0JndEJV?= =?utf-8?B?cWJzTXcreE9mSUdFbnEvRlVuK0dHdVlhOXFiamE5MWFheE5hQXJmdHVzbi9j?= =?utf-8?B?WXBZWXkzWWVRY2l2NnNIdFpGOHFpK0ZSUm94S2NBYTFVbk95b2FxVEhvd1U4?= =?utf-8?B?V3RrRS9NVGU3QlBqOHlhREVPUm1tanp5S3p3cXUzM0tSZVRhVUt6OEp3ZzdC?= =?utf-8?B?M3lQTk03Lzd2cGtPS20rZHdEeUJsb1NCc2dRRnRHN0h6ZVpSVk54cGc2MkVZ?= =?utf-8?B?Z1ZKNm1hVksyYnBMb01yUG0zeFZlRHk1WGJUU1BiVndyMDdUcGpoc0tqN2hp?= =?utf-8?B?R3AwbnN1SkFaMTNZVzYxSnFmKzlZUVp4emEzeTlVSVZZNEJoUWk2UUx4OVJo?= =?utf-8?B?bUJVT05hbS9sek1lZjhDczZJVFRtWjlCSG5SUlZqcjZ4NXkrQ1l0cTdoYkti?= =?utf-8?Q?0OKHu2HQPCBNS?= X-Microsoft-Exchange-Diagnostics: 1;CY4PR12MB1141;6:fRYhkmpvrE0N78WHnFZx6x06Khl3x02xWu4D3Bp2EpAkZ7sfU7sP7KLDYJIbbIUga/ZePWetGtECRDMBUMk2Igcv46QeBPy8r5fPHW2t4HxaMccdFHjYLSaiNgcURsFVJwd/Jie0vX+xeSI9piwHWUdIZzd7FO6YdfWFHuv4+C2w4y7LHaJSvF3CltoaSzYK4M5Bk6CLP96FWrrUq3b0//6s4SuZLs/A1tcIa3xTpi0qkEztYE/WO8TSZkaMSfvE+mIQbP1a4nqWwmHVgEPpX4JEhI7wCsOow6RaCcTQf8pwp8lugq7sARU+FayatBlTejXh86snSoTEolLDlKfBag==;5:Wh6XMTgyzsiR4a6Sm+0q8HdTiu6ksp8y+svt1j4cowJOjADLQYusxTna7xUUHjqCPOKAX4e7YncvVZslq738bcFTTdrWKmsSMOae+pSngro9qN3wkyZAmIf69RgDHGeoFt48heW5iCD5d9OVnKI9XQ==;24:tycPmA/5wViecWFVqWezzsS82/krJw0cJzwlo7OzzggzJKGPfCVH239kVpqnJkXH1MyXbs4W2n7LLXz34W1gO3QrPYE7QLYJyMei3HUcR34=;7:+eXD0ZsC8FDqKOMgRPDLyWyyi1I6LBBbQx0GeHoeQs/pp/G5zjZS/Y9FpDVZhaamerxssrk/ch4fCoV16ssDqKiMiKYbYz59Vlc8tXo5JuzgojPoCvoe+wpD8UmwuTmDkzpmVFh8/SOYtNI8XSY+5EN8jqdvjY8ya6eHEz4/eKoqtSCSUo1dfA5mSjizhyU42eV0DZ2Fb1ODBe8Nq8dfR9xXlg1jCDgK51mbJEyETtwbKRH31mo9ji0ETblYYVDPFzycMcRg8Lqe3UZVmXIrtTlQLRXhjPHA6BRGsAI/jT5gkqHBDvOP+en3MTNXfijK SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-Microsoft-Exchange-Diagnostics: 1;CY4PR12MB1141;20:iHEpubnO/GqXKP5nH6ms30cT2hrRhnlIw/FLsBLm5s0/JaTOrVIg+Vga9DFXsMZwKH/FLeIZZHV3d7zTb0V0debbSLR5yCa7b4TqEirXn/JA2W0sulGeDlEv2Jj2vRZbe7E/JjpPq5bJXq8tuqkVlu7wpyCDrxWLgSZEFShB2yJyWO1o4OS5hvJtsqLfrq6CB72RoDRS1RyofKD3IIb7xvmpUDQ2s4ut5G6FDqymJLILnmetiSvtlqEF4IThP8mh X-OriginatorOrg: amd.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Sep 2016 19:04:33.9605 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY4PR12MB1141 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On 09/22/2016 12:07 PM, Borislav Petkov wrote: > On Thu, Sep 22, 2016 at 05:05:54PM +0200, Paolo Bonzini wrote: >> Which paragraph? > > "Linux relies on BIOS to set this bit if BIOS has determined that the > reduction in the physical address space as a result of enabling memory > encryption..." > > Basically, you can enable SME in the BIOS and you're all set. That's not what I mean here. If the BIOS sets the SMEE bit in the SYS_CFG msr then, even if the encryption bit is never used, there is still a reduction in physical address space. Transparent SME (TSME) will be a BIOS option that will result in the memory controller performing encryption no matter what. In this case all data will be encrypted without a reduction in physical address space. Thanks, Tom >