From 5611cfd55f6ad558a000a02e84e65af42316edd5 Mon Sep 17 00:00:00 2001 From: Michael Niewöhner Date: Sun, 11 Oct 2020 13:04:02 +0200 Subject: soc/intel/cnl: lock AES-NI feature if selected MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Lock AES-NI (MSR_FEATURE_CONFIG) to prevent unintended changes of AES-NI enablement as precaution, as suggested in Intel document 325384-070US. Locking is enabled by default (as already done in SKL and Arrandale) and may be disabled by the newly introduced Kconfig in the parent change. Tested by checking the MSR. Change-Id: I79495bfbd3ebf3b712ce9ecf2040cecfd954178d Signed-off-by: Michael Niewöhner Reviewed-on: https://review.coreboot.org/c/coreboot/+/46273 Tested-by: build bot (Jenkins) Reviewed-by: Tim Wawrzynczak Reviewed-by: Nico Huber --- src/soc/intel/cannonlake/cpu.c | 2 ++ 1 file changed, 2 insertions(+) (limited to 'src') diff --git a/src/soc/intel/cannonlake/cpu.c b/src/soc/intel/cannonlake/cpu.c index 3d97c56404..ddedb3fed2 100644 --- a/src/soc/intel/cannonlake/cpu.c +++ b/src/soc/intel/cannonlake/cpu.c @@ -199,6 +199,8 @@ void soc_core_init(struct device *cpu) /* Configure Intel Speed Shift */ configure_isst(); + set_aesni_lock(); + /* Enable ACPI Timer Emulation via MSR 0x121 */ enable_pm_timer_emulation(); -- cgit v1.2.3