cpu/intel/common: only lock AES-NI when supported

Add a check to only lock AES-NI when AES is supported.

Change-Id: Ia7ffd5393a3e972f461ff7991b9c5bd363712361
Signed-off-by: Michael Niewöhner <foss@mniewoehner.de>
Reviewed-on: https://review.coreboot.org/c/coreboot/+/46276
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
Reviewed-by: Tim Wawrzynczak <twawrzynczak@chromium.org>
Reviewed-by: Nico Huber <nico.h@gmx.de>

src/cpu/intel/common/common_init.c

@@ -270,6 +270,9 @@ void set_aesni_lock(void)
 {
 	msr_t msr;
 
+	if (cpu_get_feature_flags_ecx() & CPUID_AES)
+		return;
+
 	/* Only run once per core as specified in the MSR datasheet */
 	if (intel_ht_sibling())
 		return;