Lines Matching full:sme
7 Secure Memory Encryption (SME) and Secure Encrypted Virtualization (SEV) are
10 SME provides the ability to mark individual pages of memory as encrypted using
13 DRAM. SME can therefore be used to protect the contents of DRAM from physical
20 memory may be encrypted with hypervisor key. When SME is enabled, the hypervisor
21 key is the same key which is used in SME.
42 Support for SME and SEV can be determined through the CPUID instruction. The
43 CPUID function 0x8000001f reports information related to SME::
46 Bit[0] indicates support for SME
56 If support for SME is present, MSR 0xc00100010 (MSR_AMD64_SYSCFG) can be used to
57 determine if SME is enabled and/or to enable memory encryption::
76 The state of SME in the Linux kernel can be documented as follows:
79 The CPU supports SME (determined through CPUID instruction).
86 the encryption bit to page table entries (the SME mask in the
89 SME can also be enabled and activated in the BIOS. If SME is enabled and
93 If the BIOS merely enables SME (sets bit 23 of the MSR_AMD64_SYSCFG),
95 kernel command line. However, if BIOS does not enable SME, then Linux