Re: [PATCHv5 03/19] mm/ksm: Do not merge pages with different KeyIDs

From: Dave Hansen
Date: Wed Jul 18 2018 - 13:38:32 EST


On 07/17/2018 04:20 AM, Kirill A. Shutemov wrote:
> Pages encrypted with different encryption keys are not allowed to be
> merged by KSM. Otherwise it would cross security boundary.

Let's say I'm using plain AES (not AES-XTS). I use the same key in two
keyid slots. I map a page with the first keyid and another with the
other keyid.

Won't they have the same cipertext? Why shouldn't we KSM them?