x86-64.net

System

PBNDKB

Encrypts and authenticates data with a key tied to the platform, for configuring Total Storage Encryption through PCONFIG.

CPUID
PBNDKB
CPUID.(EAX=07H,ECX=1):EBX[1]
Instructions
1 mnemonic
Processors
Panther Lake, Nova Lake

PBNDKB belongs to Intel Total Storage Encryption (TSE). It encrypts key material with a wrapping key derived from a secret of the platform, using AES-GCM, so that the result is only useful on that platform; the PCONFIG instruction can later hand the wrapped keys to the storage encryption engine. It reads and writes 256-byte bind structures at the addresses in RBX and RCX, works only in 64-bit mode at privilege level 0, and reports failure in ZF and EAX. Intel lists Panther Lake as the first processor with it.

Instructions

Mnemonics with at least one form in PBNDKB. Each page lists all forms of the mnemonic, including those of other extensions.
MnemonicSummaryForms
PBNDKBEncrypts and authenticates a 256-byte bind structure with a platform key, for PCONFIG to use in configuring Total Storage Encryption.1

CPUID and processors

XED splits PBNDKB into 1 ISA set. Software can use a form when the processor reports every CPUID bit of one alternative of the form's ISA set.

XED ISA sets of PBNDKB. Alternatives are separated by “or”; processors follow XED’s chip model, which covers AMD processors up to Zen 2.
ISA setCPUIDProcessors in XED
PBNDKB

PBNDKB
CPUID.(EAX=07H,ECX=1):EBX[1] PBNDKB

Panther Lake, Nova Lake

Sources

  1. Intel XED v2026.08.23 (commit 0bcb6237345c): forms, encodings, ISA sets, CPUID bits and chip model.
  2. Intel 64 and IA-32 Architectures Software Developer's Manual, Volume 2 (325383-092, June 2026)
  3. Intel Architecture Instruction Set Extensions and Future Features Programming Reference (319433-062, June 2026)

The tables are derived from Intel XED, Copyright Intel Corporation, licensed under the Apache License 2.0; x86-64.net converted and reformatted them. The text is our own.