Integrating Confidential Computing Into Cloud Infrastructure: Challenges and Opportunities
Talkat Linux Security Summit North America 2025 · on Thursday, 2025-06-26· at 16:15· Bluebird Ballroom (BBB) 3GH·
summary
Integration requires concrete changes to boot, attestation and runtime: attestation chains must include the confidential runtime and use a virtual TPM, memory pages need to be pre-accept pages to avoid huge latency, hardware limits (AMD ASID count at ~200 ASIDs) force capacity and hybrid VM/CoCo placement, live migration must verify state across untrusted hosts, swap needs disk encryption, and device trusted IO reduces fleet observability and complicates root cause debugging.
AI-written summary · about
chapters (5)
- 0:00Confidential computing basics
- 2:27Secure boot and architecture
- 5:32Performance and operational impacts
- 8:48Live migration and observability
- 11:05Cooperation and future outlook
related talks
13mVM Security with Confidential Computing
31mConfidential Containers – Sensitive Data and Privacy in Cloud Native Environments
23mConfidential computing: from niche to mainstream
11mLightning Talk: Computing Confidentially in the Clouds
36mCTO Panel: The Impact of Confidential Computing with Intel, Azure, AMD & NVIDIA
45mConfidential Computing: Protecting Customer Data in the Cloud
40mDon’t Trust Opaque Clouds, Cryptographically Verify Instead!
16mIntroduction to confidential computing