soc/intel/cnl: lock AES-NI feature if selected
commit5611cfd55f6ad558a000a02e84e65af42316edd5
authorMichael Niewöhner <foss@mniewoehner.de>
Sun, 11 Oct 2020 11:04:02 +0000 (11 13:04 +0200)
committerNico Huber <nico.h@gmx.de>
Mon, 19 Oct 2020 21:02:59 +0000 (19 21:02 +0000)
treec16f6eb5b55e6ccc3f6423afa4dcfddad45afae1
parent2ffd2198863fe8e971b56fc146339cc4dbd56295
soc/intel/cnl: lock AES-NI feature if selected

Lock AES-NI (MSR_FEATURE_CONFIG) to prevent unintended changes of
AES-NI enablement as precaution, as suggested in Intel document
325384-070US.

Locking is enabled by default (as already done in SKL and Arrandale) and
may be disabled by the newly introduced Kconfig in the parent change.

Tested by checking the MSR.

Change-Id: I79495bfbd3ebf3b712ce9ecf2040cecfd954178d
Signed-off-by: Michael Niewöhner <foss@mniewoehner.de>
Reviewed-on: https://review.coreboot.org/c/coreboot/+/46273
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
Reviewed-by: Tim Wawrzynczak <twawrzynczak@chromium.org>
Reviewed-by: Nico Huber <nico.h@gmx.de>
src/soc/intel/cannonlake/cpu.c