Encrypted Virtual Machine Images for Confidential Computing
summary
Demonstrates an end-to-end method to boot an x86 encrypted VM where decryption happens inside the guest: a patched OVMF-with-GRUB image reserves a one-page secret slot identified by a random GUID, QEMU/KVM passes the launch bundle, AMD PSP injects the secret page after attesting the OVMF/GRUB measurement, and GRUB uses the injected key to unlock dm-crypt volumes. Work is upstream in OVMF and QEMU, grub patching pending, and no live demo ran due to lab downtime.
AI-written summary · about
chapters (10)
- 0:00Start
- 1:37What is Confidential Computing?
- 3:48Implementing Confidential Computing in KVM
- 7:53The encryption envelope must protect the mutable bits
- 8:42Current encrypted UEFI boot goes via unencrypted EFI partition containing grub
- 9:59Secret Injection
- 12:33Add a UEFI configuration table entry to point to the secret area.
- 13:41Demo
- 17:39Security Analysis
- 18:54Can boot encrypted VMs with current technology
related talks
18mSecurely booting confidential VMs with encrypting disk
41mConfidential Computing, from host to workload
36mConfidential VMs in the cloud
24mThe Common Challenges of Secure VMs
25mAttestation and Confidential Dump for IBM Secure Execution on Linux
28mProviding Confidential Guest Services with a Secure VM Service Module on AMD
45mFull Disk Encryption for Confidential Computing Guests
13mVM Security with Confidential Computing