Supporting Intel/AMD memory encryption

Posted Apr 27, 2018 20:58 UTC (Fri) by luto (guest, #39314)
Parent article: Supporting Intel/AMD memory encryption

Does anyone know why more than one key is useful? Can the kernel see or change some of the raw keys?

Posted Apr 29, 2018 22:14 UTC (Sun) by eSyr (guest, #112051) [Link]

A key per virtual machine, as this whitepaper on AMD SEV (that uses ASID/PCID for selecting encryption key) suggests: https://developer.amd.com/wordpress/media/2013/12/AMD_Mem...