4 ms·
> where basically the RAM and registers of the workload are encrypted so they hypervisor cannot see them I call BS. There is no way to hide code from the platf
by blueflow 3y ago
> where basically the RAM and registers of the workload are encrypted so they hypervisor cannot see them
I call BS. There is no way to hide code from the platform it runs on.
- osigurdson 3y agoOther than homomorphic encryption of course. https://en.wikipedia.org/wiki/Homomorphic_encryption https://en.wikipedia.org/wiki/Homomorphic_encryption
- rwmj 3y agoI didn't say "from the platform", I very specifically said they're encrypted so the hypervisor or other VMs cannot see them. Believe it or not, that's how Intel TDX, AMD SEV and other systems do work, and these are real world implementations you can buy right now.
- immibis 3y agoIndeed, it's defense in depth. The hypervisor shouldn't be compromised, and other VMs shouldn't be able to read your VM's data, but if they are or can for some reason, it's encrypted.