Decoding Trust in Confidential Computing: Foundations and Open Source...
summary
Provides a concrete definition: confidential computing equals hardware-based attested TE that protects data in use, a definition that took six months to finalize. Hardware vendors listed include Intel AMD Arm Nvidia and RISC-V; attestation requires a third-party attester and yields measurable Integrity Confidentiality Identity and Uniqueness. Consortium work includes a kernel SIG for secure primitives, 12 active projects, and real deployments (Microsoft moved a year of transactions; medical imaging workflows run without reidentification).
AI-written summary · about
chapters (21)
- 0:00Confidential computing intro
- 1:23Why trust matters
- 2:25Isolation types
- 4:12Trusted execution environments
- 5:43Understanding attestation
- 7:07Attestation requirements
- 9:36Roots of trust
- 13:10Open source trust
- 15:38Trust chains in open source
- 17:25Use cases
- 19:13Trust properties
- 20:21Endorsing authorities
- 22:59CC Consortium projects
- 24:29Defining trust challenges
- 26:15CC must be open source
- 27:00Open security debate
- 29:36Logging and debugging
- 31:04Side-channel attacks
- 35:53Accreditation in CC
- 38:03Healthcare in CC
- 41:08Closing remarks
related talks
05mConfidential Computing Consortium - accelerating the privacy of computing
45mPanel Discussion: Evolving the Confidential Computing Consortium: Nonprofit Collaboration for Growth
12mThe Power of Confidential Computing: Exploring Open Source Projects
41mBoF: The Open Enclave SDK: Confidential Computing with Trusted Apps
24mShrinking The Elephant - A Confidential Computing Attestation Sequel
37mPETs - A Technical Solution To Digital Sovereignty?
05mThe Long Arc of Digital Rights: Securing our Open Source Future
26mKeynote: Trusted Firmware – Build Security Collaboratively