Re: [Qemu-devel] [RFC PATCH v4 00/20] x86: Secure Encrypted Virtualization (AMD)

From: Brijesh Singh <brijesh.singh@amd.com>
To: Eduardo Habkost <ehabkost@redhat.com>
Cc: brijesh.singh@amd.com, crosthwaite.peter@gmail.com,
	armbru@redhat.com, mst@redhat.com, p.fedin@samsung.com,
	qemu-devel@nongnu.org, lcapitulino@redhat.com,
	pbonzini@redhat.com, rth@twiddle.net, Thomas.Lendacky@amd.com
Subject: Re: [Qemu-devel] [RFC PATCH v4 00/20] x86: Secure Encrypted Virtualization (AMD)
Date: Wed, 8 Mar 2017 15:37:25 -0600	[thread overview]
Message-ID: <849e49ba-67c7-9df6-bb4f-8a59619d9e19@amd.com> (raw)
In-Reply-To: <20170308212715.GQ4694@thinpad.lan.raisama.net>

On 03/08/2017 03:27 PM, Eduardo Habkost wrote:
> On Wed, Mar 08, 2017 at 03:51:07PM -0500, Brijesh Singh wrote:
>> This RFC series provides support for AMD's new Secure Encrypted
>> Virtualization (SEV) feature. This RFC is based KVM RFC [1].
>>
>> SEV is an extension to the AMD-V architecture which supports running
>> multiple VMs under the control of a hypervisor. The SEV feature allows
>> the memory contents of a virtual machine (VM) to be transparently encrypted
>> with a key unique to the guest VM. The memory controller contains a
>> high performance encryption engine which can be programmed with multiple
>> keys for use by a different VMs in the system. The programming and
>> management of these keys is handled by the AMD Secure Processor firmware
>> which exposes a commands for these tasks.
>>
>> The KVM RFC introduced a new ioctl (KVM_MEMORY_ENCRYPTION_OP) which can be
>> used by qemu to issue the SEV commands to assist performing common hypervisor
>> activities such as a launching, running, snapshooting, migration and debugging
>> guests.
>>
>> The following links provide additional details:
>>
>> AMD Memory Encryption whitepaper:
>>
>> http://amd-dev.wpengine.netdna-cdn.com/wordpress/media/2013/12/AMD_Memory_Encryption_Whitepaper_v7-Public.pdf
>>
>> AMD64 Architecture Programmer's Manual:
>>     http://support.amd.com/TechDocs/24593.pdf
>>     SME is section 7.10
>>     SEV is section 15.34
>
> I am looking for detailed CPUID documentation, and latest version
> of Volume 3 I can find
> (http://support.amd.com/TechDocs/24594.pdf) is from June 2015 and
> doesn't include CPUID Fn8000_001F.
>
> Is there a public updated version of AMD64 Architecture
> Programmer's Manual Volume 3 including SEV CPUID info?
>

Right now the SEV specific CPUID is in AMD64 APM volume 2 [1].

[1] http://support.amd.com/TechDocs/24593.pdf

I will ask around to check when documentation team will update volume 3 to include this CPUID.

~ Brijesh

>>
>> Secure Encrypted Virutualization Key Management:
>> http://support.amd.com/TechDocs/55766_SEV-KM API_Specification.pdf
>>
>> KVM Forum slides:
>> http://www.linux-kvm.org/images/7/74/02x08A-Thomas_Lendacky-AMDs_Virtualizatoin_Memory_Encryption_Technology.pdf
>>
>> KVM RFC link:
>>
>> [1] http://marc.info/?l=linux-mm&m=148846752931115&w=2
>>
>> Video of the KVM Forum Talk:
>> https://www.youtube.com/watch?v=RcvQ1xN55Ew
>>
> [...]
>