AMD Secure Encrypted Virtualization Is Ready To Roll With Linux 4.16

[Akiko]

Will this feature work in either of:
1. AMD Threadripper
2. Ryzen Pro

I'm running a Threadripper with some heavy virtualization load for a while now. The UEFI has options for this, so I guess this will work on Threadripper, too. At last SME worked rigth from the start (you see a small RAM bandwidth drop, if activated). Also the security platform processor of the Threadripper works quite well since Linux 4.14.x (and if activated, it is off by default).

[arakan94]

What good is this when AMD still have AMD Security Processor (previously Platform Security Processor) which is like Intel's Management Engine (ME) and Intel AMT and likely insecure and vulnerable too?

Features like this are impossible to make without something like PSP..

[numacross]

Features like this are impossible to make without something like PSP..

It's one thing to have a security processor and another it being a black box of firmware with no user control

Make it open-source along with all the tools needed to build it by the end user. Flashable only with direct hardware access (like a switch on the motherboard to enable writing) and all the drama will go away.

[Ardje]

Features like this are impossible to make without something like PSP..

Actually I think that this feature will make hacking through PSP just to be able to snoop memory useless.
Or things like meltdown, since your hardware will be predicting branches against encrypted memory.