Advancements in Confidential Computing
summary
82% of surveyed users worry cloud providers can see their in‑memory data and 94% are willing to pay for extra protection; SUSE demonstrates a working stack that uses AMD SEV SNP and Intel TDX hardware memory encryption (adds a few nanoseconds latency) plus a Rust‑written service called coconut (SVSM) that attests VMs and exposes a virtual TPM, and integrates with Keylime for remote attestation and disk key release; KVM host support is still pending but the prototype releases (e.g., Miss Bernina) are functional.
AI-written summary · about
chapters (5)
- 0:00Start
- 9:55Protection against Hardware attacks
- 17:37Protection against a Rogue Hypervisor Admin
- 19:49Remote Attestation
- 23:26Coconut SVSM
related talks
13mVM Security with Confidential Computing
36mEverybody is talking about Confidential Computing - the minimum Devs should know
45mConfidential Computing: Protecting Customer Data in the Cloud
11mLightning Talk: Computing Confidentially in the Clouds
42mSponsored Session: Confidential Computing - New Capabilities for New Workloads
36mConfidential VMs in the cloud
23mIntegrating Confidential Computing Into Cloud Infrastructure: Challenges and Opportunities
16mIntroduction to confidential computing