Sridhar Siricilla has submitted this change. ( https://review.coreboot.org/c/coreboot/+/71118 )
Change subject: soc/intel/common: Add Kconfig option for Intel Key Locker ......................................................................
soc/intel/common: Add Kconfig option for Intel Key Locker
Add INTEL_KEYLOCKER Kconfig option. Disable it by default. The specification of Key Locker can be found via document #343965 on Intel's site.
Signed-off-by: Pratikkumar Prajapati pratikkumar.v.prajapati@intel.com Change-Id: Ia78e9bfe7ba2fd4e45b4821c95b19b8e580dccab Reviewed-on: https://review.coreboot.org/c/coreboot/+/71118 Tested-by: build bot (Jenkins) no-reply@coreboot.org Reviewed-by: Sridhar Siricilla sridhar.siricilla@intel.com --- M src/soc/intel/common/block/cpu/Kconfig 1 file changed, 26 insertions(+), 0 deletions(-)
Approvals: build bot (Jenkins): Verified Sridhar Siricilla: Looks good to me, approved
diff --git a/src/soc/intel/common/block/cpu/Kconfig b/src/soc/intel/common/block/cpu/Kconfig index d42824c..985bd68 100644 --- a/src/soc/intel/common/block/cpu/Kconfig +++ b/src/soc/intel/common/block/cpu/Kconfig @@ -162,3 +162,12 @@ bool "Enable Hyper-Threading" depends on HAVE_HYPERTHREADING default y + +config INTEL_KEYLOCKER + bool "Intel Key Locker" + default n + help + Enable Intel Key Locker if supported by the CPU. Intel Key Locker provides a + mechanism to encrypt and decrypt data with an AES key without having access + to the raw key value by converting AES keys into "handles". The specification + of Key Locker can be found via document #343965 on Intel's site.