Re: [RFC PATCH 0/8] x86: Support Intel Key Locker

2020-12-22 Thread Bae, Chang Seok
> On Dec 20, 2020, at 03:59, Andy Lutomirski wrote: > > On Wed, Dec 16, 2020 at 9:46 AM Chang S. Bae wrote: >> >> Key Locker [1][2] is a new security feature available in new Intel CPUs to >> protect data encryption keys for the Advanced Encryption Standard >> algorithm. The protection limits

Re: [RFC PATCH 0/8] x86: Support Intel Key Locker

2020-12-19 Thread Andy Lutomirski
On Wed, Dec 16, 2020 at 9:46 AM Chang S. Bae wrote: > > Key Locker [1][2] is a new security feature available in new Intel CPUs to > protect data encryption keys for the Advanced Encryption Standard > algorithm. The protection limits the amount of time an AES key is exposed > in memory by sealing

Re: [RFC PATCH 0/8] x86: Support Intel Key Locker

2020-12-17 Thread Bae, Chang Seok
> On Dec 18, 2020, at 04:10, Eric Biggers wrote: > > On Wed, Dec 16, 2020 at 09:41:38AM -0800, Chang S. Bae wrote: >> [1] Intel Architecture Instruction Set Extensions Programming Reference: >> >>

Re: [RFC PATCH 0/8] x86: Support Intel Key Locker

2020-12-17 Thread Dan Williams
On Thu, Dec 17, 2020 at 11:11 AM Eric Biggers wrote: > > On Wed, Dec 16, 2020 at 09:41:38AM -0800, Chang S. Bae wrote: > > [1] Intel Architecture Instruction Set Extensions Programming Reference: > > > >

Re: [RFC PATCH 0/8] x86: Support Intel Key Locker

2020-12-17 Thread Eric Biggers
On Wed, Dec 16, 2020 at 09:41:38AM -0800, Chang S. Bae wrote: > [1] Intel Architecture Instruction Set Extensions Programming Reference: > > https://software.intel.com/content/dam/develop/external/us/en/documents/architecture-instruction-set-$ > [2] Intel Key Locker Specification: > >

[RFC PATCH 0/8] x86: Support Intel Key Locker

2020-12-16 Thread Chang S. Bae
Key Locker [1][2] is a new security feature available in new Intel CPUs to protect data encryption keys for the Advanced Encryption Standard algorithm. The protection limits the amount of time an AES key is exposed in memory by sealing a key and referencing it with new AES instructions. The new