[RFC v2 00/13] Multi-Key Total Memory Encryption API (MKTME)
Kirill A. Shutemov
kirill.shutemov at linux.intel.com
Tue Dec 4 09:46:47 UTC 2018
On Tue, Dec 04, 2018 at 09:25:50AM +0000, Peter Zijlstra wrote:
> On Mon, Dec 03, 2018 at 11:39:47PM -0800, Alison Schofield wrote:
> > (Multi-Key Total Memory Encryption)
>
> I think that MKTME is a horrible name, and doesn't appear to accurately
> describe what it does either. Specifically the 'total' seems out of
> place, it doesn't require all memory to be encrypted.
MKTME implies TME. TME is enabled by BIOS and it encrypts all memory with
CPU-generated key. MKTME allows to use other keys or disable encryption
for a page.
But, yes, name is not good.
--
Kirill A. Shutemov
More information about the Linux-security-module-archive
mailing list