It's All About Trust: Why Confidential Computing Matters
Talkat Open Source Summit Europe 2023 · on Tuesday, 2023-09-19· at 14:30· Room 0C (Floor 0), Abandoibarra Etorb., 4, 48011 Bilbao, Bizkaia, Spain·
summary
Explains why hardware TEEs actually change supply-chain risk: CPUs from Intel/AMD/Arm/NVIDIA provide SGX, TDX, SEV, SNP, CCA, Realms that encrypt memory and enable cryptographic attestation, so builds, packaging and signing can run inside isolated enclaves. Describes adding attestation-backed signing to package artifacts, running production workloads in TEEs, and gaps left by keys, compilers and transitive dependencies. Mentions the Confidential Computing Consortium, several open source projects, and that this approach is necessary but not a complete fix.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 1:46Defining trust in computing
- 4:59What is confidential computing
- 8:49Confidential computing and supply chain
- 12:02Breaking down supply chain trust
- 17:18Protecting build and packaging
- 20:49Limits of signing and transitive trust
- 25:54Confidential Computing Consortium
- 31:55Industry tooling and adoption
- 36:20Q&A
related talks
37mIt's All About Trust: Why Confidential Computing Matters
42mSponsored Session: Confidential Computing - New Capabilities for New Workloads
47mThe Rise of Confidential Computing, What It Is and What it Means to You
11mLightning Talk: Computing Confidentially in the Clouds
36mEverybody is talking about Confidential Computing - the minimum Devs should know
41mPanel: A New Root Of Trust: Changing Computing With TEE
40mDoing the Safety Dance: Will Trusted Execution Environments Protect Us?- 42mSponsored Session: Confidential Computing - New Capabilities for New Workloads