From: Tom Lendacky <thomas.lendacky@amd.com>
To: Ingo Molnar <mingo@kernel.org>
Cc: linux-arch@vger.kernel.org, linux-efi@vger.kernel.org,
kvm@vger.kernel.org, linux-doc@vger.kernel.org, x86@kernel.org,
kexec@lists.infradead.org, linux-kernel@vger.kernel.org,
kasan-dev@googlegroups.com, xen-devel@lists.xen.org,
linux-mm@kvack.org, iommu@lists.linux-foundation.org,
"Brijesh Singh" <brijesh.singh@amd.com>,
"Toshimitsu Kani" <toshi.kani@hpe.com>,
"Radim Krčmář" <rkrcmar@redhat.com>,
"Matt Fleming" <matt@codeblueprint.co.uk>,
"Alexander Potapenko" <glider@google.com>,
"H. Peter Anvin" <hpa@zytor.com>,
"Larry Woodman" <lwoodman@redhat.com>,
"Jonathan Corbet" <corbet@lwn.net>,
"Joerg Roedel" <joro@8bytes.org>,
"Michael S. Tsirkin" <mst@redhat.com>,
"Ingo Molnar" <mingo@redhat.com>,
"Andrey Ryabinin" <aryabinin@virtuozzo.com>,
"Dave Young" <dyoung@redhat.com>,
"Rik van Riel" <riel@redhat.com>, "Arnd Bergmann" <arnd@arndb.de>,
"Konrad Rzeszutek Wilk" <konrad.wilk@oracle.com>,
"Borislav Petkov" <bp@alien8.de>,
"Andy Lutomirski" <luto@kernel.org>,
"Boris Ostrovsky" <boris.ostrovsky@oracle.com>,
"Dmitry Vyukov" <dvyukov@google.com>,
"Juergen Gross" <jgross@suse.com>,
"Thomas Gleixner" <tglx@linutronix.de>,
"Paolo Bonzini" <pbonzini@redhat.com>
Subject: Re: [PATCH v9 00/38] x86: Secure Memory Encryption (AMD)
Date: Mon, 10 Jul 2017 13:04:11 -0500 [thread overview]
Message-ID: <fce185d2-4420-7255-6331-6231c643c8c7@amd.com> (raw)
In-Reply-To: <20170708092426.prf7xmmnv6xvdqx4@gmail.com>
On 7/8/2017 4:24 AM, Ingo Molnar wrote:
>
> * Tom Lendacky <thomas.lendacky@amd.com> wrote:
>
>> This patch series provides support for AMD's new Secure Memory Encryption (SME)
>> feature.
>
> I'm wondering, what's the typical performance hit to DRAM access latency when SME
> is enabled?
It's about an extra 10 cycles of DRAM latency when performing an
encryption or decryption operation.
>
> On that same note, if the performance hit is noticeable I'd expect SME to not be
> enabled in native kernels typically - but still it looks like a useful hardware
In some internal testing we've seen about 1.5% or less reduction in
performance. Of course it all depends on the workload: the number of
memory accesses, cache friendliness, etc.
> feature. Since it's controlled at the page table level, have you considered
> allowing SME-activated vmas via mmap(), even on kernels that are otherwise not
> using encrypted DRAM?
That is definitely something to consider as an additional SME-related
feature and something I can look into after this.
Thanks,
Tom
>
> One would think that putting encryption keys into such encrypted RAM regions would
> generally improve robustness against various physical space attacks that want to
> extract keys but don't have full control of the CPU.
>
> Thanks,
>
> Ingo
>
WARNING: multiple messages have this Message-ID (diff)
From: Tom Lendacky <thomas.lendacky-5C7GfCeVMHo@public.gmane.org>
To: Ingo Molnar <mingo-DgEjT+Ai2ygdnm+yROfE0A@public.gmane.org>
Cc: linux-arch-u79uwXL29TY76Z2rM5mHXA@public.gmane.org,
linux-efi-u79uwXL29TY76Z2rM5mHXA@public.gmane.org,
kvm-u79uwXL29TY76Z2rM5mHXA@public.gmane.org,
linux-doc-u79uwXL29TY76Z2rM5mHXA@public.gmane.org,
x86-DgEjT+Ai2ygdnm+yROfE0A@public.gmane.org,
kexec-IAPFreCvJWM7uuMidbF8XUB+6BGkLq7r@public.gmane.org,
linux-kernel-u79uwXL29TY76Z2rM5mHXA@public.gmane.org,
kasan-dev-/JYPxA39Uh5TLH3MbocFFw@public.gmane.org,
xen-devel-GuqFBffKawuEi8DpZVb4nw@public.gmane.org,
linux-mm-Bw31MaZKKs3YtjvyW6yDsg@public.gmane.org,
iommu-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org,
"Brijesh Singh" <brijesh.singh-5C7GfCeVMHo@public.gmane.org>,
"Toshimitsu Kani" <toshi.kani-ZPxbGqLxI0U@public.gmane.org>,
"Radim Krčmář" <rkrcmar-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>,
"Matt Fleming"
<matt-mF/unelCI9GS6iBeEJttW/XRex20P6io@public.gmane.org>,
"Alexander Potapenko"
<glider-hpIqsD4AKlfQT0dZR+AlfA@public.gmane.org>,
"H. Peter Anvin" <hpa-YMNOUZJC4hwAvxtiuMwx3w@public.gmane.org>,
"Larry Woodman"
<lwoodman-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>,
"Jonathan Corbet" <corbet-T1hC0tSOHrs@public.gmane.org>,
"Joerg Roedel" <joro-zLv9SwRftAIdnm+yROfE0A@public.gmane.org>,
"Michael S. Tsirkin"
<mst-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>,
"Ingo Molnar" <mingo-H+wXaHxf7aLQT0dZR+AlfA@public.gmane.org>,
"Andrey Ryabinin"
<aryabinin-5HdwGun5lf+gSpxsJD1C4w@public.gmane.org>
Subject: Re: [PATCH v9 00/38] x86: Secure Memory Encryption (AMD)
Date: Mon, 10 Jul 2017 13:04:11 -0500 [thread overview]
Message-ID: <fce185d2-4420-7255-6331-6231c643c8c7@amd.com> (raw)
In-Reply-To: <20170708092426.prf7xmmnv6xvdqx4-Re5JQEeQqe8AvxtiuMwx3w@public.gmane.org>
On 7/8/2017 4:24 AM, Ingo Molnar wrote:
>
> * Tom Lendacky <thomas.lendacky-5C7GfCeVMHo@public.gmane.org> wrote:
>
>> This patch series provides support for AMD's new Secure Memory Encryption (SME)
>> feature.
>
> I'm wondering, what's the typical performance hit to DRAM access latency when SME
> is enabled?
It's about an extra 10 cycles of DRAM latency when performing an
encryption or decryption operation.
>
> On that same note, if the performance hit is noticeable I'd expect SME to not be
> enabled in native kernels typically - but still it looks like a useful hardware
In some internal testing we've seen about 1.5% or less reduction in
performance. Of course it all depends on the workload: the number of
memory accesses, cache friendliness, etc.
> feature. Since it's controlled at the page table level, have you considered
> allowing SME-activated vmas via mmap(), even on kernels that are otherwise not
> using encrypted DRAM?
That is definitely something to consider as an additional SME-related
feature and something I can look into after this.
Thanks,
Tom
>
> One would think that putting encryption keys into such encrypted RAM regions would
> generally improve robustness against various physical space attacks that want to
> extract keys but don't have full control of the CPU.
>
> Thanks,
>
> Ingo
>
WARNING: multiple messages have this Message-ID (diff)
From: Tom Lendacky <thomas.lendacky@amd.com>
To: Ingo Molnar <mingo@kernel.org>
Cc: linux-arch@vger.kernel.org, linux-efi@vger.kernel.org,
kvm@vger.kernel.org, linux-doc@vger.kernel.org, x86@kernel.org,
kexec@lists.infradead.org, linux-kernel@vger.kernel.org,
kasan-dev@googlegroups.com, xen-devel@lists.xen.org,
linux-mm@kvack.org, iommu@lists.linux-foundation.org,
"Brijesh Singh" <brijesh.singh@amd.com>,
"Toshimitsu Kani" <toshi.kani@hpe.com>,
"Radim Krčmář" <rkrcmar@redhat.com>,
"Matt Fleming" <matt@codeblueprint.co.uk>,
"Alexander Potapenko" <glider@google.com>,
"H. Peter Anvin" <hpa@zytor.com>,
"Larry Woodman" <lwoodman@redhat.com>,
"Jonathan Corbet" <corbet@lwn.net>,
"Joerg Roedel" <joro@8bytes.org>,
"Michael S. Tsirkin" <mst@redhat.com>,
"Ingo Molnar" <mingo@redhat.com>,
"Andrey Ryabinin" <aryabinin@virtuozzo.com>,
"Dave Young" <dyoung@redhat.com>,
"Rik van Riel" <riel@redhat.com>, "Arnd Bergmann" <arnd@arndb.de>,
"Konrad Rzeszutek Wilk" <konrad.wilk@oracle.com>,
"Borislav Petkov" <bp@alien8.de>,
"Andy Lutomirski" <luto@kernel.org>,
"Boris Ostrovsky" <boris.ostrovsky@oracle.com>,
"Dmitry Vyukov" <dvyukov@google.com>,
"Juergen Gross" <jgross@suse.com>,
"Thomas Gleixner" <tglx@linutronix.de>,
"Paolo Bonzini" <pbonzini@redhat.com>
Subject: Re: [PATCH v9 00/38] x86: Secure Memory Encryption (AMD)
Date: Mon, 10 Jul 2017 13:04:11 -0500 [thread overview]
Message-ID: <fce185d2-4420-7255-6331-6231c643c8c7@amd.com> (raw)
In-Reply-To: <20170708092426.prf7xmmnv6xvdqx4@gmail.com>
On 7/8/2017 4:24 AM, Ingo Molnar wrote:
>
> * Tom Lendacky <thomas.lendacky@amd.com> wrote:
>
>> This patch series provides support for AMD's new Secure Memory Encryption (SME)
>> feature.
>
> I'm wondering, what's the typical performance hit to DRAM access latency when SME
> is enabled?
It's about an extra 10 cycles of DRAM latency when performing an
encryption or decryption operation.
>
> On that same note, if the performance hit is noticeable I'd expect SME to not be
> enabled in native kernels typically - but still it looks like a useful hardware
In some internal testing we've seen about 1.5% or less reduction in
performance. Of course it all depends on the workload: the number of
memory accesses, cache friendliness, etc.
> feature. Since it's controlled at the page table level, have you considered
> allowing SME-activated vmas via mmap(), even on kernels that are otherwise not
> using encrypted DRAM?
That is definitely something to consider as an additional SME-related
feature and something I can look into after this.
Thanks,
Tom
>
> One would think that putting encryption keys into such encrypted RAM regions would
> generally improve robustness against various physical space attacks that want to
> extract keys but don't have full control of the CPU.
>
> Thanks,
>
> Ingo
>
--
To unsubscribe, send a message with 'unsubscribe linux-mm' in
the body to majordomo@kvack.org. For more info on Linux MM,
see: http://www.linux-mm.org/ .
Don't email: <a href=mailto:"dont@kvack.org"> email@kvack.org </a>
WARNING: multiple messages have this Message-ID (diff)
From: Tom Lendacky <thomas.lendacky@amd.com>
To: Ingo Molnar <mingo@kernel.org>
Cc: linux-efi@vger.kernel.org,
"Brijesh Singh" <brijesh.singh@amd.com>,
"Toshimitsu Kani" <toshi.kani@hpe.com>,
linux-doc@vger.kernel.org,
"Matt Fleming" <matt@codeblueprint.co.uk>,
x86@kernel.org, linux-mm@kvack.org,
"Radim Krčmář" <rkrcmar@redhat.com>,
"Alexander Potapenko" <glider@google.com>,
"H. Peter Anvin" <hpa@zytor.com>,
"Larry Woodman" <lwoodman@redhat.com>,
linux-arch@vger.kernel.org, kvm@vger.kernel.org,
"Jonathan Corbet" <corbet@lwn.net>,
"Joerg Roedel" <joro@8bytes.org>,
"Michael S. Tsirkin" <mst@redhat.com>,
kasan-dev@googlegroups.com, "Ingo Molnar" <mingo@redhat.com>,
"Andrey Ryabinin" <aryabinin@virtuozzo.com>,
"Dave Young" <dyoung@redhat.com>,
"Rik van Riel" <riel@redhat.com>, "Arnd Bergmann" <arnd@arndb.de>,
"Konrad Rzeszutek Wilk" <konrad.wilk@oracle.com>,
"Borislav Petkov" <bp@alien8.de>,
"Andy Lutomirski" <luto@kernel.org>,
"Boris Ostrovsky" <boris.ostrovsky@oracle.com>,
"Dmitry Vyukov" <dvyukov@google.com>,
"Juergen Gross" <jgross@suse.com>,
kexec@lists.infradead.org, linux-kernel@vger.kernel.org,
xen-devel@lists.xen.org, iommu@lists.linux-foundation.org,
"Thomas Gleixner" <tglx@linutronix.de>,
"Paolo Bonzini" <pbonzini@redhat.com>
Subject: Re: [PATCH v9 00/38] x86: Secure Memory Encryption (AMD)
Date: Mon, 10 Jul 2017 13:04:11 -0500 [thread overview]
Message-ID: <fce185d2-4420-7255-6331-6231c643c8c7@amd.com> (raw)
In-Reply-To: <20170708092426.prf7xmmnv6xvdqx4@gmail.com>
On 7/8/2017 4:24 AM, Ingo Molnar wrote:
>
> * Tom Lendacky <thomas.lendacky@amd.com> wrote:
>
>> This patch series provides support for AMD's new Secure Memory Encryption (SME)
>> feature.
>
> I'm wondering, what's the typical performance hit to DRAM access latency when SME
> is enabled?
It's about an extra 10 cycles of DRAM latency when performing an
encryption or decryption operation.
>
> On that same note, if the performance hit is noticeable I'd expect SME to not be
> enabled in native kernels typically - but still it looks like a useful hardware
In some internal testing we've seen about 1.5% or less reduction in
performance. Of course it all depends on the workload: the number of
memory accesses, cache friendliness, etc.
> feature. Since it's controlled at the page table level, have you considered
> allowing SME-activated vmas via mmap(), even on kernels that are otherwise not
> using encrypted DRAM?
That is definitely something to consider as an additional SME-related
feature and something I can look into after this.
Thanks,
Tom
>
> One would think that putting encryption keys into such encrypted RAM regions would
> generally improve robustness against various physical space attacks that want to
> extract keys but don't have full control of the CPU.
>
> Thanks,
>
> Ingo
>
_______________________________________________
kexec mailing list
kexec@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/kexec
next prev parent reply other threads:[~2017-07-10 18:04 UTC|newest]
Thread overview: 254+ messages / expand[flat|nested] mbox.gz Atom feed top
2017-07-07 13:38 [PATCH v9 00/38] x86: Secure Memory Encryption (AMD) Tom Lendacky
2017-07-07 13:38 ` Tom Lendacky
2017-07-07 13:38 ` Tom Lendacky
2017-07-07 13:38 ` [PATCH v9 01/38] x86: Document AMD Secure Memory Encryption (SME) Tom Lendacky
2017-07-07 13:38 ` Tom Lendacky
2017-07-07 13:38 ` Tom Lendacky
2017-07-07 13:38 ` Tom Lendacky
2017-07-07 13:38 ` Tom Lendacky
2017-07-07 13:38 ` [PATCH v9 02/38] x86/mm/pat: Set write-protect cache mode for full PAT support Tom Lendacky
2017-07-07 13:38 ` Tom Lendacky
2017-07-07 13:38 ` Tom Lendacky
2017-07-07 13:38 ` Tom Lendacky
2017-07-07 13:38 ` [PATCH v9 03/38] x86, mpparse, x86/acpi, x86/PCI, x86/dmi, SFI: Use memremap for RAM mappings Tom Lendacky
2017-07-07 13:38 ` Tom Lendacky
2017-07-07 13:38 ` Tom Lendacky
2017-07-07 13:38 ` Tom Lendacky
2017-07-07 13:38 ` [PATCH v9 04/38] x86/CPU/AMD: Add the Secure Memory Encryption CPU feature Tom Lendacky
2017-07-07 13:38 ` Tom Lendacky
2017-07-07 13:38 ` Tom Lendacky
2017-07-07 13:38 ` Tom Lendacky
2017-07-08 12:50 ` Brian Gerst
2017-07-08 12:50 ` Brian Gerst
2017-07-08 12:50 ` Brian Gerst
2017-07-08 12:50 ` Brian Gerst
2017-07-10 19:41 ` Tom Lendacky
2017-07-10 19:41 ` Tom Lendacky
2017-07-10 19:41 ` Tom Lendacky
2017-07-10 19:41 ` Tom Lendacky
2017-07-11 5:07 ` Brian Gerst
2017-07-11 5:07 ` Brian Gerst
2017-07-11 5:07 ` Brian Gerst
2017-07-11 5:07 ` Brian Gerst
2017-07-11 5:56 ` Borislav Petkov
2017-07-11 5:56 ` Borislav Petkov
2017-07-11 5:56 ` Borislav Petkov
2017-07-11 5:56 ` Borislav Petkov
2017-07-11 5:56 ` Borislav Petkov
2017-07-11 15:14 ` Tom Lendacky
2017-07-11 15:14 ` Tom Lendacky
2017-07-11 15:14 ` Tom Lendacky
2017-07-11 15:14 ` Tom Lendacky
2017-07-11 15:14 ` Tom Lendacky
2017-07-11 15:12 ` Tom Lendacky
2017-07-11 15:12 ` Tom Lendacky
2017-07-11 15:12 ` Tom Lendacky
2017-07-11 15:12 ` Tom Lendacky
2017-07-11 15:12 ` Tom Lendacky
2017-07-11 5:07 ` Brian Gerst
2017-07-10 19:41 ` Tom Lendacky
2017-07-08 12:50 ` Brian Gerst
2017-07-07 13:38 ` Tom Lendacky
2017-07-07 13:39 ` [PATCH v9 05/38] x86/CPU/AMD: Handle SME reduction in physical address size Tom Lendacky
2017-07-07 13:39 ` Tom Lendacky
2017-07-07 13:39 ` Tom Lendacky
2017-07-07 13:39 ` Tom Lendacky
2017-07-07 13:39 ` Tom Lendacky
2017-07-07 13:39 ` [PATCH v9 06/38] x86/mm: Add Secure Memory Encryption (SME) support Tom Lendacky
2017-07-07 13:39 ` Tom Lendacky
2017-07-07 13:39 ` Tom Lendacky
2017-07-07 13:39 ` Tom Lendacky
2017-07-07 13:39 ` Tom Lendacky
2017-07-07 13:39 ` [PATCH v9 07/38] x86/mm: Remove phys_to_virt() usage in ioremap() Tom Lendacky
2017-07-07 13:39 ` Tom Lendacky
2017-07-07 13:39 ` Tom Lendacky
2017-07-07 13:39 ` Tom Lendacky
2017-07-07 13:39 ` Tom Lendacky
2017-07-08 12:57 ` Brian Gerst
2017-07-08 12:57 ` Brian Gerst
2017-07-08 12:57 ` Brian Gerst
2017-07-08 12:57 ` Brian Gerst
2017-07-10 19:50 ` Tom Lendacky
2017-07-10 19:50 ` Tom Lendacky
2017-07-10 19:50 ` Tom Lendacky
2017-07-10 19:50 ` Tom Lendacky
2017-07-11 4:58 ` Brian Gerst
2017-07-11 4:58 ` Brian Gerst
2017-07-11 4:58 ` Brian Gerst
2017-07-11 4:58 ` Brian Gerst
2017-07-11 4:58 ` Brian Gerst
2017-07-11 8:35 ` Arnd Bergmann
2017-07-11 8:35 ` Arnd Bergmann
2017-07-11 8:35 ` Arnd Bergmann
2017-07-11 8:35 ` Arnd Bergmann
2017-07-11 8:35 ` Arnd Bergmann
2017-07-11 12:00 ` Brian Gerst
2017-07-11 12:00 ` Brian Gerst
2017-07-11 12:00 ` Brian Gerst
2017-07-11 12:00 ` Brian Gerst
2017-07-11 12:00 ` Brian Gerst
2017-07-11 15:02 ` Tom Lendacky
2017-07-11 15:02 ` Tom Lendacky
2017-07-11 15:02 ` Tom Lendacky
2017-07-11 15:02 ` Tom Lendacky
2017-07-11 15:02 ` Tom Lendacky
2017-07-11 15:38 ` Brian Gerst
2017-07-11 15:38 ` Brian Gerst
2017-07-11 15:38 ` Brian Gerst
2017-07-11 15:38 ` Brian Gerst
2017-07-11 15:38 ` Brian Gerst
2017-07-11 15:44 ` Tom Lendacky
2017-07-11 15:44 ` Tom Lendacky
2017-07-11 15:44 ` Tom Lendacky
2017-07-11 15:44 ` Tom Lendacky
2017-07-11 15:44 ` Tom Lendacky
2017-07-10 19:50 ` Tom Lendacky
2017-07-08 12:57 ` Brian Gerst
2017-07-07 13:39 ` [PATCH v9 08/38] x86/mm: Add support to enable SME in early boot processing Tom Lendacky
2017-07-07 13:39 ` Tom Lendacky
2017-07-07 13:39 ` Tom Lendacky
2017-07-07 13:39 ` Tom Lendacky
2017-07-07 13:39 ` [PATCH v9 09/38] x86/mm: Simplify p[g4um]d_page() macros Tom Lendacky
2017-07-07 13:39 ` Tom Lendacky
2017-07-07 13:39 ` Tom Lendacky
2017-07-07 13:39 ` Tom Lendacky
2017-07-07 13:39 ` [PATCH v9 10/38] x86/mm: Provide general kernel support for memory encryption Tom Lendacky
2017-07-07 13:39 ` Tom Lendacky
2017-07-07 13:39 ` Tom Lendacky
2017-07-07 13:39 ` Tom Lendacky
2017-07-07 13:39 ` Tom Lendacky
2017-07-07 13:40 ` [PATCH v9 11/38] x86/mm: Add SME support for read_cr3_pa() Tom Lendacky
2017-07-07 13:40 ` Tom Lendacky
2017-07-07 13:40 ` Tom Lendacky
2017-07-07 13:40 ` Tom Lendacky
2017-07-07 13:40 ` Tom Lendacky
2017-07-07 13:40 ` [PATCH v9 12/38] x86/mm: Extend early_memremap() support with additional attrs Tom Lendacky
2017-07-07 13:40 ` Tom Lendacky
2017-07-07 13:40 ` Tom Lendacky
2017-07-07 13:40 ` Tom Lendacky
2017-07-07 13:40 ` Tom Lendacky
2017-07-07 13:40 ` [PATCH v9 13/38] x86/mm: Add support for early encrypt/decrypt of memory Tom Lendacky
2017-07-07 13:40 ` Tom Lendacky
2017-07-07 13:40 ` Tom Lendacky
2017-07-07 13:40 ` Tom Lendacky
2017-07-07 13:40 ` Tom Lendacky
2017-07-07 13:40 ` [PATCH v9 14/38] x86/mm: Insure that boot memory areas are mapped properly Tom Lendacky
2017-07-07 13:40 ` Tom Lendacky
2017-07-07 13:40 ` Tom Lendacky
2017-07-07 13:40 ` Tom Lendacky
2017-07-07 13:40 ` Tom Lendacky
2017-07-07 13:40 ` [PATCH v9 15/38] x86/boot/e820: Add support to determine the E820 type of an address Tom Lendacky
2017-07-07 13:40 ` Tom Lendacky
2017-07-07 13:40 ` Tom Lendacky
2017-07-07 13:40 ` Tom Lendacky
2017-07-07 13:41 ` [PATCH v9 16/38] efi: Add an EFI table address match function Tom Lendacky
2017-07-07 13:41 ` Tom Lendacky
2017-07-07 13:41 ` Tom Lendacky
2017-07-07 13:41 ` Tom Lendacky
2017-07-07 13:41 ` [PATCH v9 17/38] efi: Update efi_mem_type() to return an error rather than 0 Tom Lendacky
2017-07-07 13:41 ` Tom Lendacky
2017-07-07 13:41 ` Tom Lendacky
2017-07-07 13:41 ` Tom Lendacky
2017-07-07 13:41 ` Tom Lendacky
2017-07-07 13:41 ` [PATCH v9 18/38] x86/efi: Update EFI pagetable creation to work with SME Tom Lendacky
2017-07-07 13:41 ` Tom Lendacky
2017-07-07 13:41 ` Tom Lendacky
2017-07-07 13:41 ` Tom Lendacky
2017-07-07 13:41 ` [PATCH v9 19/38] x86/mm: Add support to access boot related data in the clear Tom Lendacky
2017-07-07 13:41 ` Tom Lendacky
2017-07-07 13:41 ` Tom Lendacky
2017-07-07 13:41 ` Tom Lendacky
2017-07-07 13:41 ` [PATCH v9 20/38] x86, mpparse: Use memremap to map the mpf and mpc data Tom Lendacky
2017-07-07 13:41 ` Tom Lendacky
2017-07-07 13:41 ` Tom Lendacky
2017-07-07 13:41 ` Tom Lendacky
2017-07-07 13:41 ` [PATCH v9 21/38] x86/mm: Add support to access persistent memory in the clear Tom Lendacky
2017-07-07 13:41 ` Tom Lendacky
2017-07-07 13:41 ` Tom Lendacky
2017-07-07 13:41 ` Tom Lendacky
2017-07-07 13:42 ` [PATCH v9 22/38] x86/mm: Add support for changing the memory encryption attribute Tom Lendacky
2017-07-07 13:42 ` Tom Lendacky
2017-07-07 13:42 ` Tom Lendacky
2017-07-07 13:42 ` Tom Lendacky
2017-07-07 13:42 ` Tom Lendacky
2017-07-07 13:42 ` [PATCH v9 23/38] x86/realmode: Decrypt trampoline area if memory encryption is active Tom Lendacky
2017-07-07 13:42 ` Tom Lendacky
2017-07-07 13:42 ` Tom Lendacky
2017-07-07 13:42 ` Tom Lendacky
2017-07-07 13:42 ` [PATCH v9 24/38] x86, swiotlb: Add memory encryption support Tom Lendacky
2017-07-07 13:42 ` Tom Lendacky
2017-07-07 13:42 ` Tom Lendacky
2017-07-07 13:42 ` Tom Lendacky
2017-07-07 13:42 ` Tom Lendacky
2017-07-07 13:42 ` [PATCH v9 25/38] swiotlb: Add warnings for use of bounce buffers with SME Tom Lendacky
2017-07-07 13:42 ` Tom Lendacky
2017-07-07 13:42 ` Tom Lendacky
2017-07-07 13:42 ` Tom Lendacky
2017-07-07 13:42 ` Tom Lendacky
2017-07-07 13:42 ` [PATCH v9 26/38] x86/CPU/AMD: Make the microcode level available earlier in the boot Tom Lendacky
2017-07-07 13:42 ` Tom Lendacky
2017-07-07 13:42 ` Tom Lendacky
2017-07-07 13:42 ` Tom Lendacky
2017-07-07 13:43 ` [PATCH v9 27/38] iommu/amd: Allow the AMD IOMMU to work with memory encryption Tom Lendacky
2017-07-07 13:43 ` Tom Lendacky
2017-07-07 13:43 ` Tom Lendacky
2017-07-07 13:43 ` Tom Lendacky
2017-07-07 13:43 ` Tom Lendacky
2017-07-07 13:43 ` [PATCH v9 28/38] x86, realmode: Check for memory encryption on the APs Tom Lendacky
2017-07-07 13:43 ` Tom Lendacky
2017-07-07 13:43 ` Tom Lendacky
2017-07-07 13:43 ` Tom Lendacky
2017-07-07 13:43 ` [PATCH v9 29/38] x86, drm, fbdev: Do not specify encrypted memory for video mappings Tom Lendacky
2017-07-07 13:43 ` Tom Lendacky
2017-07-07 13:43 ` Tom Lendacky
2017-07-07 13:43 ` Tom Lendacky
2017-07-07 13:43 ` [PATCH v9 30/38] kvm: x86: svm: Support Secure Memory Encryption within KVM Tom Lendacky
2017-07-07 13:43 ` Tom Lendacky
2017-07-07 13:43 ` Tom Lendacky
2017-07-07 13:43 ` Tom Lendacky
2017-07-07 13:43 ` [PATCH v9 31/38] x86/mm, kexec: Allow kexec to be used with SME Tom Lendacky
2017-07-07 13:43 ` Tom Lendacky
2017-07-07 13:43 ` Tom Lendacky
2017-07-07 13:43 ` Tom Lendacky
2017-07-07 13:44 ` [PATCH v9 32/38] xen/x86: Remove SME feature in PV guests Tom Lendacky
2017-07-07 13:44 ` Tom Lendacky
2017-07-07 13:44 ` Tom Lendacky
2017-07-07 13:44 ` Tom Lendacky
2017-07-07 13:44 ` [PATCH v9 33/38] x86/mm: Use proper encryption attributes with /dev/mem Tom Lendacky
2017-07-07 13:44 ` Tom Lendacky
2017-07-07 13:44 ` Tom Lendacky
2017-07-07 13:44 ` Tom Lendacky
2017-07-07 13:44 ` Tom Lendacky
2017-07-07 13:44 ` [PATCH v9 34/38] x86/mm: Create native_make_p4d() for PGTABLE_LEVELS <= 4 Tom Lendacky
2017-07-07 13:44 ` Tom Lendacky
2017-07-07 13:44 ` Tom Lendacky
2017-07-07 13:44 ` Tom Lendacky
2017-07-07 13:44 ` [PATCH v9 35/38] x86/mm: Add support to encrypt the kernel in-place Tom Lendacky
2017-07-07 13:44 ` Tom Lendacky
2017-07-07 13:44 ` Tom Lendacky
2017-07-07 13:44 ` Tom Lendacky
2017-07-07 13:44 ` Tom Lendacky
2017-07-07 13:44 ` [PATCH v9 36/38] x86/boot: Add early cmdline parsing for options with arguments Tom Lendacky
2017-07-07 13:44 ` Tom Lendacky
2017-07-07 13:44 ` Tom Lendacky
2017-07-07 13:44 ` Tom Lendacky
2017-07-07 13:45 ` [PATCH v9 37/38] compiler-gcc.h: Introduce __nostackp function attribute Tom Lendacky
2017-07-07 13:45 ` Tom Lendacky
2017-07-07 13:45 ` Tom Lendacky
2017-07-07 13:45 ` Tom Lendacky
2017-07-07 13:45 ` Tom Lendacky
2017-07-07 13:45 ` [PATCH v9 38/38] x86/mm: Add support to make use of Secure Memory Encryption Tom Lendacky
2017-07-07 13:45 ` Tom Lendacky
2017-07-07 13:45 ` Tom Lendacky
2017-07-07 13:45 ` Tom Lendacky
2017-07-08 9:24 ` [PATCH v9 00/38] x86: Secure Memory Encryption (AMD) Ingo Molnar
2017-07-08 9:24 ` Ingo Molnar
2017-07-08 9:24 ` Ingo Molnar
2017-07-08 9:24 ` Ingo Molnar
2017-07-08 9:24 ` Ingo Molnar
2017-07-10 18:04 ` Tom Lendacky
2017-07-10 18:04 ` Tom Lendacky [this message]
2017-07-10 18:04 ` Tom Lendacky
2017-07-10 18:04 ` Tom Lendacky
2017-07-10 18:04 ` Tom Lendacky
-- strict thread matches above, loose matches on Subject: below --
2017-07-07 13:38 Tom Lendacky
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=fce185d2-4420-7255-6331-6231c643c8c7@amd.com \
--to=thomas.lendacky@amd.com \
--cc=arnd@arndb.de \
--cc=aryabinin@virtuozzo.com \
--cc=boris.ostrovsky@oracle.com \
--cc=bp@alien8.de \
--cc=brijesh.singh@amd.com \
--cc=corbet@lwn.net \
--cc=dvyukov@google.com \
--cc=dyoung@redhat.com \
--cc=glider@google.com \
--cc=hpa@zytor.com \
--cc=iommu@lists.linux-foundation.org \
--cc=jgross@suse.com \
--cc=joro@8bytes.org \
--cc=kasan-dev@googlegroups.com \
--cc=kexec@lists.infradead.org \
--cc=konrad.wilk@oracle.com \
--cc=kvm@vger.kernel.org \
--cc=linux-arch@vger.kernel.org \
--cc=linux-doc@vger.kernel.org \
--cc=linux-efi@vger.kernel.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-mm@kvack.org \
--cc=luto@kernel.org \
--cc=lwoodman@redhat.com \
--cc=matt@codeblueprint.co.uk \
--cc=mingo@kernel.org \
--cc=mingo@redhat.com \
--cc=mst@redhat.com \
--cc=pbonzini@redhat.com \
--cc=riel@redhat.com \
--cc=rkrcmar@redhat.com \
--cc=tglx@linutronix.de \
--cc=toshi.kani@hpe.com \
--cc=x86@kernel.org \
--cc=xen-devel@lists.xen.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.