soc/intel/common: Add config option to enable TME/MKTME

Add config option to enable TME/MKTME.
The spec is available at: "https://software.intel.com/sites/
default/files/managed/a5/16/Multi-Key-Total-Memory-Encryption-
Spec.pdf"

Signed-off-by: Pratik Prajapati <pratikkumar.v.prajapati@intel.com>
Change-Id: I181aed2bf4a79005fe42e3e133b5faee91201dad
Reviewed-on: https://review.coreboot.org/c/coreboot/+/45087
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
Reviewed-by: Tim Wawrzynczak <twawrzynczak@chromium.org>
Reviewed-by: Subrata Banik <subrata.banik@intel.com>
This commit is contained in:
Pratik Prajapati 2020-09-03 11:07:39 -07:00 committed by Subrata Banik
parent c65f1f95dc
commit 823e73e143
1 changed files with 10 additions and 0 deletions

View File

@ -88,3 +88,13 @@ config USE_INTEL_FSP_TO_CALL_COREBOOT_PUBLISH_MP_PPI
help help
This option allows FSP to make use of MP services PPI published by This option allows FSP to make use of MP services PPI published by
coreboot to perform multiprocessor initialization. coreboot to perform multiprocessor initialization.
config INTEL_TME
bool "Total Memory Encryption (TME)/Multi-key TME (MKTME)"
default n
help
Enable Total Memory Encryption (TME)/Multi-key TME (MKTME). The spec is
available at "https://software.intel.com/sites/default/files/managed/a5
/16/Multi-Key-Total-Memory-Encryption-Spec.pdf". If CPU supports TME,
it would get enabled. If CPU supports MKTME, this same config option
enables MKTME.