It Turns Out Intel TDX Doesn't Need So Much Cache Flushing
Intel Trust Domain Extensions (TDX) for confidential computing with VMs has assumed the need to perform cache flushing when transitioning memory between KeyIDs used by the total memory encryption (MKTME) for unique AES encryption keys. But it's turned out to be unneeded and the Linux kernel is working now to reduce the excessive cache flushing...
We haven't written up this one. Phoronix has the full story — the link below goes straight to it.
