Re: [PATCHv3 14/17] x86/mm: Introduce direct_mapping_size

2018-06-18 Thread Dave Hansen
On 06/18/2018 06:12 AM, Kirill A. Shutemov wrote: > On Wed, Jun 13, 2018 at 06:37:07PM +, Dave Hansen wrote: >> On 06/12/2018 07:39 AM, Kirill A. Shutemov wrote: >>> Kernel need to have a way to access encrypted memory. We are going to >> "The kernel needs"... >> >>> use per-KeyID direct mappin

Re: [PATCHv3 14/17] x86/mm: Introduce direct_mapping_size

2018-06-18 Thread Kirill A. Shutemov
On Wed, Jun 13, 2018 at 06:37:07PM +, Dave Hansen wrote: > On 06/12/2018 07:39 AM, Kirill A. Shutemov wrote: > > Kernel need to have a way to access encrypted memory. We are going to > "The kernel needs"... > > > use per-KeyID direct mapping to facilitate the access with minimal > > overhead.

Re: [PATCHv3 14/17] x86/mm: Introduce direct_mapping_size

2018-06-13 Thread Dave Hansen
On 06/12/2018 07:39 AM, Kirill A. Shutemov wrote: > Kernel need to have a way to access encrypted memory. We are going to "The kernel needs"... > use per-KeyID direct mapping to facilitate the access with minimal > overhead. What are the security implications of this approach? > Direct mapping f

Re: [PATCHv3 14/17] x86/mm: Introduce direct_mapping_size

2018-06-12 Thread Kirill A. Shutemov
On Tue, Jun 12, 2018 at 02:58:38PM +, Mika Penttilä wrote: > > > On 12.06.2018 17:39, Kirill A. Shutemov wrote: > > Kernel need to have a way to access encrypted memory. We are going to > > use per-KeyID direct mapping to facilitate the access with minimal > > overhead. > > > > Direct mapping

Re: [PATCHv3 14/17] x86/mm: Introduce direct_mapping_size

2018-06-12 Thread Mika Penttilä
On 12.06.2018 17:39, Kirill A. Shutemov wrote: > Kernel need to have a way to access encrypted memory. We are going to > use per-KeyID direct mapping to facilitate the access with minimal > overhead. > > Direct mapping for each KeyID will be put next to each other in the > virtual address space.

[PATCHv3 14/17] x86/mm: Introduce direct_mapping_size

2018-06-12 Thread Kirill A. Shutemov
Kernel need to have a way to access encrypted memory. We are going to use per-KeyID direct mapping to facilitate the access with minimal overhead. Direct mapping for each KeyID will be put next to each other in the virtual address space. We need to have a way to find boundaries of direct mapping f