sravan/system76-coreboot
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

utils/inteltool: Add support to print Key Locker status

Browse Source 
Add command-line option "-k" to print status.

Sample output:

$ inteltool -k
============= Dumping INTEL Key Locker status =============
Key Locker supported : YES
AESKL instructions enabled : NO
===========================================================

Change-Id: Icb1b08619b1dbc535640127f7ab5f6b49d70a6fe
Signed-off-by: Pratikkumar Prajapati <pratikkumar.v.prajapati@intel.com>
Reviewed-on: https://review.coreboot.org/c/coreboot/+/71657
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
Reviewed-by: Sridhar Siricilla <sridhar.siricilla@intel.com>
This commit is contained in:
Pratikkumar Prajapati
2022-12-19 09:52:34 -08:00
committed by Felix Held
parent 12367e0db1
commit c262b44d7c
3 changed files with 70 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

68
util/inteltool/cpu.c
View File

@@ -3,6 +3,7 @@
#include <fcntl.h>
#include <unistd.h>
#include <stdbool.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
@@ -17,16 +18,20 @@
# define BREG "%%ebx"
#endif
#define IA32_FEATURE_CONTROL 0x3a
#define SGX_GLOBAL_ENABLED (1 << 18)
#define FEATURE_CONTROL_LOCKED (1)
#define MTRR_CAP_MSR 0xfe
#define PRMRR_SUPPORTED (1 << 12)
#define SGX_SUPPORTED (1 << 2)
#define IA32_TME_ACTIVATE 0x982
#define TME_SUPPORTED (1 << 13)
#define TME_LOCKED (1)
#define TME_ENABLED (1 << 1)
#define CPUID_STRUCT_EXTENDED_FEATURE_FLAGS 0x7
#define IA32_FEATURE_CONTROL 0x3a
#define SGX_GLOBAL_ENABLED (1 << 18)
#define FEATURE_CONTROL_LOCKED (1)
#define MTRR_CAP_MSR 0xfe
#define PRMRR_SUPPORTED (1 << 12)
#define SGX_SUPPORTED (1 << 2)
#define IA32_TME_ACTIVATE 0x982
#define TME_SUPPORTED (1 << 13)
#define TME_LOCKED (1)
#define TME_ENABLED (1 << 1)
#define CPUID_KEYLOCKER_FEATURE_FLAGS 0x19
#define KEYLOCKER_SUPPORTED (1<<23)
#define KEYLOCKER_AESKL (1)
int fd_msr;
@@ -266,6 +271,49 @@ void print_tme(void)
#endif
}
static bool is_keylocker_supported()
{
cpuid_result_t cpuid_regs;
msr_t msr;
/*
* CPUID leaf 0x7 subleaf 0x0 to detect Intel Key Locker support.
* The specification of Key Locker can be found at: https://www.intel.com/
* content/www/us/en/develop/download/intel-key-locker-specification.html
* The spec can also be found via document #343965 on Intel's site.
*/
cpuid_regs = cpuid_ext(CPUID_STRUCT_EXTENDED_FEATURE_FLAGS, 0x0);
msr = rdmsr_from_cpu(0, MTRR_CAP_MSR);
return ((cpuid_regs.ecx & KEYLOCKER_SUPPORTED) && (msr.lo & PRMRR_SUPPORTED));
}
static bool is_aeskl_enabled()
{
cpuid_result_t cpuid_regs;
/* CPUID leaf 0x19 subleaf 0x0 to detect details of Intel Key Locker feature */
cpuid_regs = cpuid_ext(CPUID_KEYLOCKER_FEATURE_FLAGS, 0x0);
return (cpuid_regs.ebx & KEYLOCKER_AESKL);
}
void print_keylocker(void)
{
#ifndef __DARWIN__
int keylocker_supported = is_keylocker_supported();
printf("\n============= Dumping INTEL Key Locker status =============\n");
printf("Key Locker supported : %s\n", keylocker_supported ? "YES" : "NO");
if (keylocker_supported) {
printf("AESKL instructions enabled : %s\n", is_aeskl_enabled() ? "YES" : "NO");
}
printf("===========================================================\n");
#else
printf("Not Implemented\n");
#endif
}
int print_intel_msrs(unsigned int range_start, unsigned int range_end)
{
unsigned int i, core, id;