Re: [PATCH] KVM: s390: vsie: Consolidate CRYCB validation

2018-08-22 Thread David Hildenbrand
>> >>> From the host, we control the guest1 and we start it without AP >>> by not setting ECA.28. >>> So that the guest1 can not know if APXA is installed or not since to know >>> this it must use a AP instruction :) >> No AP implies no APXA. On that logical level "host". > > hum. > No seen, usab

Re: [PATCH] KVM: s390: vsie: Consolidate CRYCB validation

2018-08-22 Thread Pierre Morel
On 22/08/2018 13:09, David Hildenbrand wrote: On 22.08.2018 12:42, Pierre Morel wrote: On 22/08/2018 10:44, David Hildenbrand wrote: On 22.08.2018 10:41, Pierre Morel wrote: On 22/08/2018 10:25, David Hildenbrand wrote: On 22.08.2018 10:08, Pierre Morel wrote: Currently when shadowing the CR

Re: [PATCH] KVM: s390: vsie: Consolidate CRYCB validation

2018-08-22 Thread David Hildenbrand
On 22.08.2018 12:42, Pierre Morel wrote: > On 22/08/2018 10:44, David Hildenbrand wrote: >> On 22.08.2018 10:41, Pierre Morel wrote: >>> On 22/08/2018 10:25, David Hildenbrand wrote: On 22.08.2018 10:08, Pierre Morel wrote: > Currently when shadowing the CRYCB on SIE entrance, the validati

Re: [PATCH] KVM: s390: vsie: Consolidate CRYCB validation

2018-08-22 Thread David Hildenbrand
On 22.08.2018 10:41, Pierre Morel wrote: > On 22/08/2018 10:25, David Hildenbrand wrote: >> On 22.08.2018 10:08, Pierre Morel wrote: >>> Currently when shadowing the CRYCB on SIE entrance, the validation >>> tests the following: >>> - accept only FORMAT1 or FORMAT2 >>> - test if MSAext facility (76

Re: [PATCH] KVM: s390: vsie: Consolidate CRYCB validation

2018-08-22 Thread Pierre Morel
On 22/08/2018 10:25, David Hildenbrand wrote: On 22.08.2018 10:08, Pierre Morel wrote: Currently when shadowing the CRYCB on SIE entrance, the validation tests the following: - accept only FORMAT1 or FORMAT2 - test if MSAext facility (76) is installed - accept the CRYCB if no keys are used - ver

Re: [PATCH] KVM: s390: vsie: Consolidate CRYCB validation

2018-08-22 Thread David Hildenbrand
On 22.08.2018 10:08, Pierre Morel wrote: > Currently when shadowing the CRYCB on SIE entrance, the validation > tests the following: > - accept only FORMAT1 or FORMAT2 > - test if MSAext facility (76) is installed > - accept the CRYCB if no keys are used > - verifies that the CRYCB format1 is insid