From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1756116AbdGXTIq (ORCPT ); Mon, 24 Jul 2017 15:08:46 -0400 Received: from mail-bn3nam01on0045.outbound.protection.outlook.com ([104.47.33.45]:41632 "EHLO NAM01-BN3-obe.outbound.protection.outlook.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1754974AbdGXTIW (ORCPT ); Mon, 24 Jul 2017 15:08:22 -0400 Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=brijesh.singh@amd.com; From: Brijesh Singh To: linux-kernel@vger.kernel.org, x86@kernel.org, linux-efi@vger.kernel.org, linuxppc-dev@lists.ozlabs.org, kvm@vger.kernel.org Cc: Thomas Gleixner , Ingo Molnar , "H . Peter Anvin" , Borislav Petkov , Andy Lutomirski , Tony Luck , Piotr Luc , Tom Lendacky , Fenghua Yu , Lu Baolu , Reza Arbab , David Howells , Matt Fleming , "Kirill A . Shutemov" , Laura Abbott , Ard Biesheuvel , Andrew Morton , Eric Biederman , Benjamin Herrenschmidt , Paul Mackerras , Konrad Rzeszutek Wilk , Jonathan Corbet , Dave Airlie , Kees Cook , Paolo Bonzini , =?UTF-8?q?Radim=20Kr=C4=8Dm=C3=A1=C5=99?= , Arnd Bergmann , Tejun Heo , Christoph Lameter , Brijesh Singh Subject: [RFC Part1 PATCH v3 01/17] Documentation/x86: Add AMD Secure Encrypted Virtualization (SEV) descrption Date: Mon, 24 Jul 2017 14:07:41 -0500 Message-Id: <20170724190757.11278-2-brijesh.singh@amd.com> X-Mailer: git-send-email 2.9.4 In-Reply-To: <20170724190757.11278-1-brijesh.singh@amd.com> References: <20170724190757.11278-1-brijesh.singh@amd.com> MIME-Version: 1.0 Content-Type: text/plain X-Originating-IP: [165.204.78.1] X-ClientProxiedBy: CY4PR04CA0049.namprd04.prod.outlook.com (10.171.243.142) To CY1PR12MB0150.namprd12.prod.outlook.com (10.161.173.20) X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: f0d07fe4-b883-4494-e94a-08d4d2c7576b X-MS-Office365-Filtering-HT: Tenant X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(48565401081)(300000503095)(300135400095)(201703131423075)(201703031133081)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095);SRVR:CY1PR12MB0150; X-Microsoft-Exchange-Diagnostics: 1;CY1PR12MB0150;3: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 X-MS-TrafficTypeDiagnostic: CY1PR12MB0150: X-Microsoft-Exchange-Diagnostics: 1;CY1PR12MB0150;25:FtDc3kvt0cztvJEnowoZhxkRSK3Fmh1k2xVJWVA3ua9HgAgvIAzqK7tuP3M8AGRoAPu1ICarvftBXBbYLG9MFpTkiHaLuVEC/KXvw0hJBsriSOs6daDcjzYlFu9ACmA1mEBk0ugjpeLC7v/k74PejqnNzHwU/pZeSo5aRTnZ7ReLQUbxkS3O1zggErfZY0xrvDHW3l/v2EvqIhc6hqwg3I7VyLFjKJjr6EKWIyp7wplF+BR0i/PsIelJKzjGfVqC2CVgRk3V6ygucT01L9xBydoX33VlJY6nqNLAxtAap9mwOGO3cHT9gTTSfVMoReRVfHFJoJW7DQEO15HGGD5PSNP6Fw8693cWTx//PknepV5KnMnRjcCGEa1UOqkVEtjgDDIu7mvEbjrAXZ8w5oQedvXWo3SMQQw5ZwrUHISDBcdzOvXCi0PDYMzrFWW4QcDjiE+eKyqN1ZHBFXrmv11UJR7kW0DwJnAmBbVkjsP+VtSSOWdH+A6q3jwhpZxpDXit5OPxaLtllaY5LNoRoOHh4RszWaTFm+7KMxCnrtLQKj1BTL2JoNu9aWDmw0ZoYaqwcT9YYz/Hq3Zn9WqXlj3J+qU7+h5erN4EVKvQQ9NXwUaa6BPb5i9vatWY2rFkESXWYE8x3X0RNys041kXn7FUWaDMMai5eTrV+PuPLLoq+GLTNHziY97jHeDoJk6W9hMdlhlOnSvUUD5SIStHr2RDRjql6K2qkS31TLKqi4lZCtGh1iKGz4YV+M92YNvAJuifgnaPbpg8EH41B3AC7rVaQot9kWJFizOZOzYCJ/MdxmLrMSVybqa1CzvEt1kX2hVNFGKTFhbZhyXNXs+lDiha5wX2YeT1zaPzHqu7yd51w8wTvPp3UJSGwOD1rqJSby7CKXFUADsFcWjOwCGZt9c/7VM73ZNtKOOL6SLnYKQvL70= X-Microsoft-Exchange-Diagnostics: 1;CY1PR12MB0150;31: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 X-Microsoft-Exchange-Diagnostics: 1;CY1PR12MB0150;20:eIk2drreqG2LapiHTOmlPjOe3a8fy6Kq0AkY3OoDbNP2DD0j+v6fgxt4XkTBa9PJp92TyUFaHNGQ8FFNeJG1tTsrjk6q5yhWpQjav+zagsMK5fwRtEj2Zl57Y6aHxgiOUKClV/Oo98H6JaQIZhuIzH8iMNJIOFCwuFv7JcH/WEuhg0uSvDmVcyVdauZZXIY5wMpMG1OC8v3AyhIZsvOrOaCQ6kpR3W8XDHffkLbQw+PuOePtxCQOlUx77wKxB8wAMhuAjv0/aBRBzv8iZAW54BPuP/ynTU4/UsF96PvRtPFj4WSmfxf6rjECWvqSEkLT/x+/lIHqKKTYF9Q3C/DBX5KADMbtltUCUJTtik7kGT4T/CP9FSyrgikF/AADSqadOkjBcry+4sMO7l50pyqOR2jtsIWImVW1QXnBSDHdPGqzXsVJsLT52OYCgaExN+48GNSOYOshDmUp3xXwV/3Ex1VVOr8CoydmD2Cz4ZNYUBq7/iVFIlRgkRqasZd9ndGs X-Exchange-Antispam-Report-Test: UriScan:(20558992708506)(192374486261705)(767451399110)(17755550239193); X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(601004)(2401047)(8121501046)(5005006)(93006095)(93001095)(10201501046)(100000703101)(100105400095)(3002001)(6055026)(6041248)(20161123564025)(20161123555025)(20161123560025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123558100)(20161123562025)(6072148)(100000704101)(100105200095)(100000705101)(100105500095);SRVR:CY1PR12MB0150;BCL:0;PCL:0;RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095);SRVR:CY1PR12MB0150; X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1;CY1PR12MB0150;4:sNtDbWQBNAeiKuW2/myeZh4eC/+CnfWVHroWPru1qV?= =?us-ascii?Q?0jVrupeRGjzs6CqZBKZHguQJGDM66RZx7Yfr0F5pASCK/p2A0dJeSuoyb3k+?= =?us-ascii?Q?fh5hKC0iQr63W5hhbQLsUcKrTYGJS00Q1TgjXavF0ngsX09G5mjhJXBGge5i?= =?us-ascii?Q?QmK1i/wyjp3yepMfH4tfzeZOUVS/kOk2GnawFtV2CEPrrVMkQvgDvnxHcy1m?= =?us-ascii?Q?T/lBIcsKAc40LHi61wcy90RlySwMsMI+0dUbqMVaSwGO5GF+5pt41zVc8h5Y?= =?us-ascii?Q?6bvH0SBX7oi0Rc/RqSWoE/2HtK9zjfnwM8qpPspQO68B5cCmQ9fJ4cnDEWIC?= =?us-ascii?Q?JLX1N7wb30wCOIqLIrtVbQmq0Ttw9jg1fNnuWz6u4N+0Vtmy+t/BT5A7xsx4?= =?us-ascii?Q?RotirBpyGj+uTqkXPc62UehW6/0shAl4Z9cPwQDJ5MXnTvwdYXOH3auXtDw0?= =?us-ascii?Q?FDLBZIy013umDUaZlfy9uESnPbCemY08ZR+aaKwQXQ/mm1JIEcUxRrTyR1ZH?= =?us-ascii?Q?t9ZURBJ42nBNjMwUDj7JPQWL6qQigyMzK5rDTGclznCqOYbWlHOVUmmYSv8U?= =?us-ascii?Q?d7vNTUByCh1E4WxE6L0X9hKrQJiofoHOBDerVky2qDpYCGPJTYyn8lnN3zmO?= =?us-ascii?Q?4atitjwTl/7RkQnJhGUxs/E8ZKtOZzI0bfAU9jl8Wg4cn3QRD5EecYj2VDYc?= =?us-ascii?Q?FqXGIsiRlpFjAyF39ShcyUM8tB6YnH4o04levORfR8hxd7QTUZg+mUDRWe2s?= =?us-ascii?Q?ffObaEXKT1voKaFubsOx/fsg9Uk5u+d7S+gxsMZBaz+HehSQyRfwsJ3C5B/j?= =?us-ascii?Q?jTH36c/pJIuILaz8wLMC5QMK20ffD/8Acnhm43hC0NS+xONZa2I9onYL+U6O?= =?us-ascii?Q?T5c4CZxbHohGvXm8HAJW5qdICyjjOtmEwnZdDVV3ZbWfME5CrzePqXuUxXjr?= =?us-ascii?Q?32UuHc1hmVhoMzW/ef6MKjP0UJ/aUjf803ytujfCHjbLxxVfwTB3nc84uYva?= =?us-ascii?Q?tiwIgWHmTbGS6A4Lszg8HKNMRl9AhgUHZpTeQYryUc9A+OPfd/j3fd4S0kb4?= =?us-ascii?Q?+ULBu7nXyEZX5ZQFPVEjur/mrh6b3vmaKWUkpT+hKuW8mu2Y4QP50X4jecpe?= =?us-ascii?Q?HLyThp+cUUouLmUWr2ZVrjWbC4ngGyR/H/eSJnmvmD4uiYtU2zk9w/QoYmPW?= =?us-ascii?Q?eyzTdqrlm/jy6LUDSeHIZT8JNQgJpeKGXh4IMArpvGjzgOy5ti7Z1TIjDyR1?= =?us-ascii?Q?iKWwfhO9e4k9Pj0YB6BRLlM3aq9I/BMpQeqim/D0JWd0W4UtHIBXP2KPKzuV?= =?us-ascii?Q?zrs4td4tRPLW3JNKqFBYg=3D?= X-Forefront-PRVS: 0378F1E47A X-Forefront-Antispam-Report: SFV:NSPM;SFS:(10009020)(4630300001)(7370300001)(6009001)(39840400002)(39850400002)(39450400003)(39400400002)(39410400002)(39860400002)(199003)(189002)(4326008)(81156014)(7350300001)(81166006)(50226002)(50466002)(68736007)(36756003)(38730400002)(1076002)(110136004)(53936002)(6116002)(25786009)(48376002)(8676002)(86362001)(305945005)(54906002)(7736002)(2950100002)(6666003)(50986999)(101416001)(47776003)(105586002)(5660300001)(5003940100001)(7416002)(33646002)(106356001)(66066001)(6486002)(7406005)(97736004)(189998001)(3846002)(76176999)(2906002)(53416004)(42186005)(478600001)(129583001);DIR:OUT;SFP:1101;SCL:1;SRVR:CY1PR12MB0150;H:ubuntu-010236106000.amd.com;FPR:;SPF:None;PTR:InfoNoRecords;A:1;MX:1;LANG:en; X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1;CY1PR12MB0150;23:hOZbMjQ9nZWP3+5TZsL+56o77/uq6aP+Aa6a/2z+i?= =?us-ascii?Q?/ISvOCzOsjuJuxfaDg6Yg3PdJe8cWjU469fPCloc8nKVnYc12wO6HSxbvI29?= =?us-ascii?Q?Wk6ri73v+fHEsUlsJWjmxuLeAS1l7Pqi8gJUA+gNoatj+sx5TQATtyBCOcEa?= =?us-ascii?Q?AUEzJA4u99hn7qSQU38uQXeAO7scSJfgjP8zYJDc3BB7drealsm+1eF9UnNy?= =?us-ascii?Q?mkGQepB0ASphtVzz4DZR/aEmW1eUDNalO2cxplHbH/OR+1VgTPyrk2VapnVz?= =?us-ascii?Q?896o4XpNtRLXR/L4REzcrwJETVuGaanhT7b9h+OgkziMGHe7+OnSvsTVPaxK?= =?us-ascii?Q?xcDiHgxOPXILLQvG0S6FbVcC0GMNKzqLZ39eiH5qYARMiu238ebjwPWdOR6J?= =?us-ascii?Q?88/CpKn1HCf9D+zCGEvoUW4ygGDQsKuwXm+PtWXQLSsmQcZa4rONas4ISBH7?= =?us-ascii?Q?1Ry+VEfLe0VqYuY5qIke7u9Qf8K6HJF9KDRTP2M+zx/zzVWREla/qNqa+Dj6?= =?us-ascii?Q?04XpXNX8ZJPGLbIbJagxUDpG3+EwJRkjJlMJUn4C8vbKnwX4+h7ONzadx/Q9?= =?us-ascii?Q?UICXqYZTvGMJfvhdnwAsNEeZq+el0o0CjFDfBYwrI6HVo0yew74f9+cS54CI?= =?us-ascii?Q?sbqZUi7TOU1SCK7xgj7jM1+Ra/c/FI4ySJeT0qY6DSZ7tuueQq4MwgBYRoFp?= =?us-ascii?Q?h3hFmG470Lue1w/g7UAnfuBLa+Y9Tvpd6QufZml/0sCKxc/yguZXZgffpJ+L?= =?us-ascii?Q?hvm3/nnGRHwpQE2LbdfwTu2ooOkZPLMxAdGYZDCcH6PcIdlhbPO8CnZ5RrFG?= =?us-ascii?Q?+9+e5mb+SJXK+kmEsEI7mF7eBOu14YnVnLVNaY/8ov4Qz0sxvOAEMORWRSaz?= =?us-ascii?Q?IDdwVUXCn8m5GHiYKCYFG/1pOU3MIEcw5SrLFrIywPoR2afRrEySxkpqXNU4?= =?us-ascii?Q?2b3oMG3I9f/bo+6WuSUjV4Ia5ZjIdZq5wnXSfQvnaymVxnZNh3F1KWhFAbgy?= =?us-ascii?Q?rHmE6EIIxIiJwKu84kLmDYdn6anT4JHsrhM1tyDSmRQ9oZg+F47STjX7wVsS?= =?us-ascii?Q?MYjKu5rvDMvCYdORCTax6Um7BY50/MU/6RLHWZlveVsJmRRS7gpK3pgPTHuO?= =?us-ascii?Q?9++jHGQmZAKTdGoN3ydAWP4ULJA+4k5ltKH7ha1C8LM52Uxkw3XfNrJ43dcz?= =?us-ascii?Q?P4mhEsFePnHRhUHyZ1ydsSRDzDayGGFJu+h6e3vOvNjs5SSuIFrCjrW2160u?= =?us-ascii?Q?kBp5EDN46cmec95utMOCzuTyAaLfugldH4ZyfWugKIjXcMZLc66E4zyT2LPf?= =?us-ascii?Q?syr61AnLieXb2fvOrlYaJdmC36eu+AMvA8lpU3zfcVG?= X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1;CY1PR12MB0150;6:H9MEBISj08lm/fNHhRbcgNfEBGKnt/H0ycKs+jhMgW?= =?us-ascii?Q?JUmSiBgix/YnwNfr8dkkpiMekyRE7hNvJVhj/qDy9T3PvIhkw9HUrBwOD0MI?= =?us-ascii?Q?+IfLYyQyyTms3Gtr9cgQf3JSDCgAn1Yttw8CVBMKfNRp0topw89B2C7+HLLl?= =?us-ascii?Q?inkKSisb3TDj/gXkXjP7s0cumTQNbc82t8bFdJpIbPBzK5lONzw/PBVROqoD?= =?us-ascii?Q?UEArMpoOAMIDH8wF6/+HTzt40WE3wDKZNSOZTGDWCecp/fFNktY9SQXIpDG2?= =?us-ascii?Q?TC5xsV1fwmUGPB5JYaLJkehcnaYy8X4l5EWvOAyvyuG28sy0oFceK2wIi3Qb?= =?us-ascii?Q?4Dy4OYl1pHLkf+ZElSdlnzyoYUlZgrAAjZ94vLlI86pKcS2h8SdszGMX3BX7?= =?us-ascii?Q?NTRMePwPqg8E396uaE/DQaiyJFTi/4mA3pSXiUiMq4zKz3J2bQ9at7N0eUau?= =?us-ascii?Q?EloplTd+59F/qmMlHhPzfSK3MpUA+y/i4v2KqP58QF561AdS6t/2Du/tG/N4?= =?us-ascii?Q?a00oubi1SXWO8gE+YunzZh/Yazh1lR23sLRkuAVKYUrRPHrYAW9sKiTLxLQ8?= =?us-ascii?Q?qxibXcTzRyiqFyofZ3s943olS8YK+/2Y5T/YvjKN0K6KPPcaUFUsTrBSoYH7?= =?us-ascii?Q?VJHyX6r2HIamnNFj6Q5vT2GSHwPK2jSSUkUes8ioCwnkTLTi4/Dk5oxYRkgq?= =?us-ascii?Q?+9qGimu3U1I5JYq5W7oTjeM0F72k3vtkoAEQGVEIorDrUfVmolIov92+gNfQ?= =?us-ascii?Q?HncDQzo1HhEn6oQdwPZ054FAaAU6oF6nhnUpmO46QLESdSAhYVToy+c4MHGe?= =?us-ascii?Q?LwJQ0xLgGDa7f6DYWgmJobXn7pvIhDQ4zwB9CpTWH2vgjDPvhOk6jUFBKn2k?= =?us-ascii?Q?+WjmM5opcszgw4gWwGn0SFz7ZHV89xREvbAJHo6G72mVINwv54u71f8Ewti7?= =?us-ascii?Q?3AoJIlPtq66tvReEK8oVFRNgSzyx7dDPFDgW1Dc93rNg3pX9ZVYFZEdMc0Fa?= =?us-ascii?Q?UUKtbxnj6B3aicFUSRxFkv?= X-Microsoft-Exchange-Diagnostics: 1;CY1PR12MB0150;5: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;24:YQuOLTi8j6j/7UjLYWM7sPTBhovh3WHuqvBU0eYlwpcO6FbDzJg+1iCzIOpeepmEg1F3cWjNZYzSZSL7NDa6UZKZxTvanAeSJuBGAcCBTog= SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-Microsoft-Exchange-Diagnostics: 1;CY1PR12MB0150;7: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 X-Microsoft-Exchange-Diagnostics: 1;CY1PR12MB0150;20:eYIE8jtU6ReqkIOoA1zyCDxceiU4j8Ic7YEAvCpTVOpKwwwD504fybe3DL6JQaDqRScEp5E/Ifal8kyZJyzgq4I7PdBiAeIqOK/0CG22yy7c0CPrtG6dgTlQdp+EWYdvgrOWZS+oZCAqP97nViNFcmr+sJY2gpmEZbCQbjSf8QREKuIWxtV6n707wf8Rq01tYY/L7pTCTlIOKJEhvWHUAmsi9f8kMDAHCpdpExvt2iuUqpBsZSKMOjQT04oqR8Iv X-OriginatorOrg: amd.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Jul 2017 19:08:15.8097 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR12MB0150 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Update amd-memory-encryption document describing the AMD Secure Encrypted Virtualization (SEV) feature. Signed-off-by: Brijesh Singh --- Documentation/x86/amd-memory-encryption.txt | 29 ++++++++++++++++++++++++++--- 1 file changed, 26 insertions(+), 3 deletions(-) diff --git a/Documentation/x86/amd-memory-encryption.txt b/Documentation/x86/amd-memory-encryption.txt index f512ab7..747df07 100644 --- a/Documentation/x86/amd-memory-encryption.txt +++ b/Documentation/x86/amd-memory-encryption.txt @@ -1,4 +1,5 @@ -Secure Memory Encryption (SME) is a feature found on AMD processors. +Secure Memory Encryption (SME) and Secure Encrypted Virtualization (SEV) are +features found on AMD processors. SME provides the ability to mark individual pages of memory as encrypted using the standard x86 page tables. A page that is marked encrypted will be @@ -6,6 +7,12 @@ automatically decrypted when read from DRAM and encrypted when written to DRAM. SME can therefore be used to protect the contents of DRAM from physical attacks on the system. +SEV enables running encrypted virtual machine (VMs) in which the code and data +of the virtual machine are secured so that decrypted version is available only +within the VM itself. SEV guest VMs have concept of private and shared memory. +Private memory is encrypted with the guest-specific key, while shared memory +may be encrypted with hypervisor key. + A page is encrypted when a page table entry has the encryption bit set (see below on how to determine its position). The encryption bit can also be specified in the cr3 register, allowing the PGD table to be encrypted. Each @@ -19,11 +26,20 @@ so that the PGD is encrypted, but not set the encryption bit in the PGD entry for a PUD which results in the PUD pointed to by that entry to not be encrypted. -Support for SME can be determined through the CPUID instruction. The CPUID -function 0x8000001f reports information related to SME: +When SEV is enabled, certain type of memory (namely insruction pages and guest +page tables) are always treated as private. Due to security reasons all DMA +operations inside the guest must be performed on shared memory. Since the +memory encryption bit is only controllable by the guest OS when it is operating +in 64-bit or 32-bit PAE mode, in all other modes the SEV hardware forces memory +encryption bit to 1. + +Support for SME and SEV can be determined through the CPUID instruction. The +CPUID function 0x8000001f reports information related to SME: 0x8000001f[eax]: Bit[0] indicates support for SME + 0x800001f[eax]: + Bit[1] indicates support for SEV 0x8000001f[ebx]: Bits[5:0] pagetable bit number used to activate memory encryption @@ -39,6 +55,13 @@ determine if SME is enabled and/or to enable memory encryption: Bit[23] 0 = memory encryption features are disabled 1 = memory encryption features are enabled +If SEV is supported, MSR 0xc0010131 (MSR_F17H_SEV) can be used to determine if +SEV is active: + + 0xc0010131: + Bit[0] 0 = memory encryption is not active + 1 = memory encryption is active + Linux relies on BIOS to set this bit if BIOS has determined that the reduction in the physical address space as a result of enabling memory encryption (see CPUID information above) will not conflict with the address space resource -- 2.9.4 From mboxrd@z Thu Jan 1 00:00:00 1970 From: Brijesh Singh Subject: [RFC Part1 PATCH v3 01/17] Documentation/x86: Add AMD Secure Encrypted Virtualization (SEV) descrption Date: Mon, 24 Jul 2017 14:07:41 -0500 Message-ID: <20170724190757.11278-2-brijesh.singh@amd.com> References: <20170724190757.11278-1-brijesh.singh@amd.com> Mime-Version: 1.0 Content-Type: text/plain Return-path: In-Reply-To: <20170724190757.11278-1-brijesh.singh-5C7GfCeVMHo@public.gmane.org> Sender: linux-efi-owner-u79uwXL29TY76Z2rM5mHXA@public.gmane.org To: linux-kernel-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, x86-DgEjT+Ai2ygdnm+yROfE0A@public.gmane.org, linux-efi-u79uwXL29TY76Z2rM5mHXA@public.gmane.org, linuxppc-dev-uLR06cmDAlY/bJ5BZ2RsiQ@public.gmane.org, kvm-u79uwXL29TY76Z2rM5mHXA@public.gmane.org Cc: Thomas Gleixner , Ingo Molnar , "H . Peter Anvin" , Borislav Petkov , Andy Lutomirski , Tony Luck , Piotr Luc , Tom Lendacky , Fenghua Yu , Lu Baolu , Reza Arbab , David Howells , Matt Fleming , "Kirill A . Shutemov" , Laura Abbott , Ard Biesheuvel , Andrew Morton , Eric Biederman , Benjamin Herrenschmidt Paul Mackerras

List-Id: linux-efi@vger.kernel.org Update amd-memory-encryption document describing the AMD Secure Encrypted Virtualization (SEV) feature. Signed-off-by: Brijesh Singh --- Documentation/x86/amd-memory-encryption.txt | 29 ++++++++++++++++++++++++++--- 1 file changed, 26 insertions(+), 3 deletions(-) diff --git a/Documentation/x86/amd-memory-encryption.txt b/Documentation/x86/amd-memory-encryption.txt index f512ab7..747df07 100644 --- a/Documentation/x86/amd-memory-encryption.txt +++ b/Documentation/x86/amd-memory-encryption.txt @@ -1,4 +1,5 @@ -Secure Memory Encryption (SME) is a feature found on AMD processors. +Secure Memory Encryption (SME) and Secure Encrypted Virtualization (SEV) are +features found on AMD processors. SME provides the ability to mark individual pages of memory as encrypted using the standard x86 page tables. A page that is marked encrypted will be @@ -6,6 +7,12 @@ automatically decrypted when read from DRAM and encrypted when written to DRAM. SME can therefore be used to protect the contents of DRAM from physical attacks on the system. +SEV enables running encrypted virtual machine (VMs) in which the code and data +of the virtual machine are secured so that decrypted version is available only +within the VM itself. SEV guest VMs have concept of private and shared memory. +Private memory is encrypted with the guest-specific key, while shared memory +may be encrypted with hypervisor key. + A page is encrypted when a page table entry has the encryption bit set (see below on how to determine its position). The encryption bit can also be specified in the cr3 register, allowing the PGD table to be encrypted. Each @@ -19,11 +26,20 @@ so that the PGD is encrypted, but not set the encryption bit in the PGD entry for a PUD which results in the PUD pointed to by that entry to not be encrypted. -Support for SME can be determined through the CPUID instruction. The CPUID -function 0x8000001f reports information related to SME: +When SEV is enabled, certain type of memory (namely insruction pages and guest +page tables) are always treated as private. Due to security reasons all DMA +operations inside the guest must be performed on shared memory. Since the +memory encryption bit is only controllable by the guest OS when it is operating +in 64-bit or 32-bit PAE mode, in all other modes the SEV hardware forces memory +encryption bit to 1. + +Support for SME and SEV can be determined through the CPUID instruction. The +CPUID function 0x8000001f reports information related to SME: 0x8000001f[eax]: Bit[0] indicates support for SME + 0x800001f[eax]: + Bit[1] indicates support for SEV 0x8000001f[ebx]: Bits[5:0] pagetable bit number used to activate memory encryption @@ -39,6 +55,13 @@ determine if SME is enabled and/or to enable memory encryption: Bit[23] 0 = memory encryption features are disabled 1 = memory encryption features are enabled +If SEV is supported, MSR 0xc0010131 (MSR_F17H_SEV) can be used to determine if +SEV is active: + + 0xc0010131: + Bit[0] 0 = memory encryption is not active + 1 = memory encryption is active + Linux relies on BIOS to set this bit if BIOS has determined that the reduction in the physical address space as a result of enabling memory encryption (see CPUID information above) will not conflict with the address space resource -- 2.9.4 From mboxrd@z Thu Jan 1 00:00:00 1970 From: Brijesh Singh Subject: [RFC Part1 PATCH v3 01/17] Documentation/x86: Add AMD Secure Encrypted Virtualization (SEV) descrption Date: Mon, 24 Jul 2017 14:07:41 -0500 Message-ID: <20170724190757.11278-2-brijesh.singh@amd.com> References: <20170724190757.11278-1-brijesh.singh@amd.com> Mime-Version: 1.0 Content-Type: text/plain Cc: Thomas Gleixner , Ingo Molnar , "H . Peter Anvin" , Borislav Petkov , Andy Lutomirski , Tony Luck , Piotr Luc , Tom Lendacky , Fenghua Yu , Lu Baolu , Reza Arbab , David Howells , Matt Fleming , "Kirill A . Shutemov" , Laura Abbott , Ard Biesheuvel , Andrew Morton , Eric Biederman , Benjamin Herrenschmidt , Paul Mackerras

In-Reply-To: <20170724190757.11278-1-brijesh.singh-5C7GfCeVMHo@public.gmane.org> Sender: linux-efi-owner-u79uwXL29TY76Z2rM5mHXA@public.gmane.org List-Id: kvm.vger.kernel.org Update amd-memory-encryption document describing the AMD Secure Encrypted Virtualization (SEV) feature. Signed-off-by: Brijesh Singh --- Documentation/x86/amd-memory-encryption.txt | 29 ++++++++++++++++++++++++++--- 1 file changed, 26 insertions(+), 3 deletions(-) diff --git a/Documentation/x86/amd-memory-encryption.txt b/Documentation/x86/amd-memory-encryption.txt index f512ab7..747df07 100644 --- a/Documentation/x86/amd-memory-encryption.txt +++ b/Documentation/x86/amd-memory-encryption.txt @@ -1,4 +1,5 @@ -Secure Memory Encryption (SME) is a feature found on AMD processors. +Secure Memory Encryption (SME) and Secure Encrypted Virtualization (SEV) are +features found on AMD processors. SME provides the ability to mark individual pages of memory as encrypted using the standard x86 page tables. A page that is marked encrypted will be @@ -6,6 +7,12 @@ automatically decrypted when read from DRAM and encrypted when written to DRAM. SME can therefore be used to protect the contents of DRAM from physical attacks on the system. +SEV enables running encrypted virtual machine (VMs) in which the code and data +of the virtual machine are secured so that decrypted version is available only +within the VM itself. SEV guest VMs have concept of private and shared memory. +Private memory is encrypted with the guest-specific key, while shared memory +may be encrypted with hypervisor key. + A page is encrypted when a page table entry has the encryption bit set (see below on how to determine its position). The encryption bit can also be specified in the cr3 register, allowing the PGD table to be encrypted. Each @@ -19,11 +26,20 @@ so that the PGD is encrypted, but not set the encryption bit in the PGD entry for a PUD which results in the PUD pointed to by that entry to not be encrypted. -Support for SME can be determined through the CPUID instruction. The CPUID -function 0x8000001f reports information related to SME: +When SEV is enabled, certain type of memory (namely insruction pages and guest +page tables) are always treated as private. Due to security reasons all DMA +operations inside the guest must be performed on shared memory. Since the +memory encryption bit is only controllable by the guest OS when it is operating +in 64-bit or 32-bit PAE mode, in all other modes the SEV hardware forces memory +encryption bit to 1. + +Support for SME and SEV can be determined through the CPUID instruction. The +CPUID function 0x8000001f reports information related to SME: 0x8000001f[eax]: Bit[0] indicates support for SME + 0x800001f[eax]: + Bit[1] indicates support for SEV 0x8000001f[ebx]: Bits[5:0] pagetable bit number used to activate memory encryption @@ -39,6 +55,13 @@ determine if SME is enabled and/or to enable memory encryption: Bit[23] 0 = memory encryption features are disabled 1 = memory encryption features are enabled +If SEV is supported, MSR 0xc0010131 (MSR_F17H_SEV) can be used to determine if +SEV is active: + + 0xc0010131: + Bit[0] 0 = memory encryption is not active + 1 = memory encryption is active + Linux relies on BIOS to set this bit if BIOS has determined that the reduction in the physical address space as a result of enabling memory encryption (see CPUID information above) will not conflict with the address space resource -- 2.9.4