Home
last modified time | relevance | path

Searched refs:SEV (Results 1 – 22 of 22) sorted by relevance

/linux-6.15/Documentation/virt/coco/
H A Dsev-guest.rst4 The Definitive SEV Guest API Documentation
10 The SEV API is a set of ioctls that are used by the guest or hypervisor
27 which SEV technology provides this ioctl. SEV, SEV-ES, SEV-SNP or all.
100 contain the format described in the SEV-SNP specification. See the SEV-SNP
115 SEV-SNP firmware to derive the key. See SEV-SNP specification for further details
119 the SEV-SNP specification for further details.
198 3. SEV-SNP CPUID Enforcement
214 SEV-SNP attestation report.
226 4. SEV Guest Driver Communication Key
229 Communication between an SEV guest and the SEV firmware in the AMD Secure
[all …]
/linux-6.15/Documentation/virt/kvm/x86/
H A Damd-memory-encryption.rst4 Secure Encrypted Virtualization (SEV)
19 to SEV::
22 Bit[1] indicates support for SEV
39 setting the SEV bit before executing VMRUN.::
42 Bit[1] 1 = SEV is enabled
43 0 = SEV is disabled
157 For more details, see SEV spec Section 6.2.
178 For more details, see SEV spec Section 6.3.
218 SEV-enabled guest.
232 SEV guest state:
[all …]
/linux-6.15/Documentation/arch/x86/
H A Damd-memory-encryption.rst7 Secure Memory Encryption (SME) and Secure Encrypted Virtualization (SEV) are
16 SEV enables running encrypted virtual machines (VMs) in which the code and data
18 within the VM itself. SEV guest VMs have the concept of private and shared
47 Bit[1] indicates support for SEV
64 SEV is active::
102 SEV-SNP introduces new features (SEV_FEATURES[1:63]) which can be enabled
147 Support for this form of the RMP is present when support for SEV-SNP is
151 Bit[4] indicates support for SEV-SNP
167 SEV-SNP guests. The RMP covers the system physical address from::
174 cover all of system memory in order for Linux to enable SEV-SNP.
[all …]
/linux-6.15/Documentation/ABI/testing/
H A Dconfigfs-tsm30 "cert_table" from SEV-ES Guest-Hypervisor Communication Block
55 [1]: SEV Secure Nested Paging Firmware ABI Specification
83 different privilege levels, like SEV-SNP "VMPL", specify the
103 provider for TVMs, like SEV-SNP running under an SVSM.
109 for SEV-SNP Guests v1.00 Section 7. For the doc, search for
110 "site:amd.com "Secure VM Service Module for SEV-SNP
120 provider for TVMs, like SEV-SNP running under an SVSM.
138 provider for TVMs, like SEV-SNP running under an SVSM.
H A Dsecurityfs-secrets-coco9 platforms (such as AMD SEV and SEV-ES) for secret injection by
H A Dsysfs-devices-system-cpu614 Description: Secure Encrypted Virtualization (SEV) information
616 This directory is only present when running as an SEV-SNP guest.
619 the SEV-SNP guest is running.
/linux-6.15/drivers/virt/coco/sev-guest/
H A DKconfig2 tristate "AMD SEV Guest driver"
7 SEV-SNP firmware provides the guest a mechanism to communicate with
/linux-6.15/Documentation/security/secrets/
H A Dcoco.rst15 Confidential Computing (coco) hardware such as AMD SEV (Secure Encrypted
17 memory without the host/hypervisor being able to read them. In SEV,
36 area. In AMD SEV and SEV-ES this is performed using the
99 See [sev-api-spec]_ for more info regarding SEV ``LAUNCH_SECRET`` operation.
/linux-6.15/Documentation/virt/hyperv/
H A Dcoco.rst25 * AMD processor with SEV-SNP. Hyper-V does not run guest VMs with AMD SME,
26 SEV, or SEV-ES encryption, and such encryption is not sufficient for a CoCo
79 * With AMD SEV-SNP processors, in fully-enlightened mode the guest OS runs in
85 as defined by the SEV-SNP architecture. This mode simplifies guest management
93 MSR indicates if the underlying processor uses AMD SEV-SNP or Intel TDX, and
108 AMD SEV-SNP in fully-enlightened mode.
116 * CPUID flags. Both AMD SEV-SNP and Intel TDX provide a CPUID flag in the
122 abstracting the differences between SEV-SNP and TDX. But the
125 flags are not set. The exception is early boot memory setup on SEV-SNP, which
126 tests the CPUID SEV-SNP flag. But not having the flag in Hyper-V paravisor
[all …]
H A Dvmbus.rst157 guest to not trust the hypervisor (AMD SEV-SNP, Intel TDX), trusting
/linux-6.15/arch/arm/include/asm/
H A Dspinlock.h39 #define SEV __ALT_SMP_ASM(WASM(sev), WASM(nop)) macro
45 __asm__(SEV); in dsb_sev()
/linux-6.15/arch/x86/kvm/
H A DKconfig143 bool "AMD Secure Encrypted Virtualization (SEV) support"
153 Encrypted Virtualization (SEV), Secure Encrypted Virtualization with
154 Encrypted State (SEV-ES), and Secure Encrypted Virtualization with
155 Secure Nested Paging (SEV-SNP) technologies on AMD processors.
H A Dcpuid.c1159 VENDOR_F(SEV), in kvm_set_cpu_caps()
/linux-6.15/drivers/virt/coco/efi_secret/
H A DKconfig10 confidential computing secret injection (for example for AMD SEV
/linux-6.15/arch/riscv/boot/dts/microchip/
H A Dmpfs-sev-kit.dts12 model = "Microchip PolarFire-SoC SEV Kit";
/linux-6.15/drivers/crypto/ccp/
H A DKconfig45 management commands in Secure Encrypted Virtualization (SEV) mode,
/linux-6.15/tools/arch/x86/kcpuid/
H A Dcpuid.csv952 # AMD encrypted memory capabilities enumeration (SME/SEV)
957 0x8000001f, 0, eax, 3, sev_es , SEV Encrypted State supported
958 0x8000001f, 0, eax, 4, sev_nested_paging , SEV secure nested paging supported
965 0x8000001f, 0, eax, 11, req_64bit_hypervisor , SEV guest mandates 64-bit hypervi…
968 0x8000001f, 0, eax, 14, debug_swap , SEV-ES: full debug state swap is …
969 0x8000001f, 0, eax, 15, disallow_host_ibs , SEV-ES: Disallowing IBS use by th…
973 … eax, 19, virt_ibs , IBS state virtualization is supported for SEV-ES guests
982 0x8000001f, 0, edx, 31:0, min_sev_asid_no_sev_es , Mininum ASID for SEV-enabled SEV-…
/linux-6.15/drivers/firmware/efi/
H A DKconfig254 Confidential Computing platforms (such as AMD SEV) allow the
/linux-6.15/arch/x86/include/asm/
H A Dkvm_host.h1324 __APICV_INHIBIT_REASON(SEV), \
/linux-6.15/Documentation/virt/kvm/
H A Dapi.rst4780 (SEV) commands on AMD Processors. The SEV commands are defined in
4795 It is used in the SEV-enabled guest. When encryption is enabled, a guest
4796 memory region may contain encrypted data. The SEV memory encryption
4800 swapped. So relocating (or migrating) physical backing pages for the SEV
4803 Note: The current SEV key management spec does not provide commands to
6854 - KVM_SYSTEM_EVENT_SEV_TERM -- an AMD SEV guest requested termination.
7999 :Architectures: x86 SEV enabled
8081 :Architectures: x86 SEV enabled
/linux-6.15/Documentation/admin-guide/
H A Dkernel-parameters.txt939 like Hyper-V, PowerPC (fadump) and AMD SEV-SNP.
6473 Do not enable SEV-SNP (applies to host/hypervisor
6476 SEV-SNP guests.
/linux-6.15/
H A DMAINTAINERS1023 AMD CRYPTOGRAPHIC COPROCESSOR (CCP) DRIVER - SEV SUPPORT