From dd63dc1dc576f6f0a051a86c02fa62695b075b0c Mon Sep 17 00:00:00 2001 From: Pratikkumar Prajapati Date: Sun, 18 Dec 2022 18:49:42 -0800 Subject: [PATCH] soc/intel/common: Add Kconfig option for Intel Key Locker Add INTEL_KEYLOCKER Kconfig option. Disable it by default. The specification of Key Locker can be found via document #343965 on Intel's site. Signed-off-by: Pratikkumar Prajapati Change-Id: Ia78e9bfe7ba2fd4e45b4821c95b19b8e580dccab Reviewed-on: https://review.coreboot.org/c/coreboot/+/71118 Tested-by: build bot (Jenkins) Reviewed-by: Sridhar Siricilla --- src/soc/intel/common/block/cpu/Kconfig | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/src/soc/intel/common/block/cpu/Kconfig b/src/soc/intel/common/block/cpu/Kconfig index d42824c4ce..985bd684dc 100644 --- a/src/soc/intel/common/block/cpu/Kconfig +++ b/src/soc/intel/common/block/cpu/Kconfig @@ -162,3 +162,12 @@ config FSP_HYPERTHREADING bool "Enable Hyper-Threading" depends on HAVE_HYPERTHREADING default y + +config INTEL_KEYLOCKER + bool "Intel Key Locker" + default n + help + Enable Intel Key Locker if supported by the CPU. Intel Key Locker provides a + mechanism to encrypt and decrypt data with an AES key without having access + to the raw key value by converting AES keys into "handles". The specification + of Key Locker can be found via document #343965 on Intel's site.