4 ms·
To be fair, the PSP is involved quite intimately in the various features for securing VMs. With the Zen processors, it should in principle be possible to send a
by nhaehnle 9y ago
To be fair, the PSP is involved quite intimately in the various features for securing VMs. With the Zen processors, it should in principle be possible to send an encrypted VM to a cloud provider and be certain that this is the VM that runs, and that the cloud provider has no way of readings its RAM (thanks to RAM encryption with a PSP-generated key).
External audits of those security properties are of course basically impossible, but it is true that the PSP enhances security for some use cases. AFAIK those are only data center use cases, though; ordinary users don't benefit.
It's true though that while the PSP as it is today doesn't hurt users, it could be turned into an anti-user artifact in the future. That's not really in AMD's interest, though.