2 ms·
Foolproof root of trust would make cloud providers a lot more trustworthy. For example AMD's SME+SEV is in theory able to attest that a cryptographically verif
by benlivengood 3y ago
Foolproof root of trust would make cloud providers a lot more trustworthy. For example AMD's SME+SEV is in theory able to attest that a cryptographically verified (as opposed to trusted) boot process resulted in an encrypted-RAM VM running on someone else's computer that it would be pretty hard for them to impersonate or read data from (they can always inject errors). It's always up to the person evaluating the measured attestation to determine the trust in the software that was attested.
Individuals don't have quite as much to benefit from. I don't bother to run SEV on my personal cloud VMs. Mostly because it's more likely for there to be enough software 0-days to not offer much practical protection. If I was trying to do cryptocurrency in the cloud on top of seL4 or something equally verifiable then maybe SEV/SecureBoot would be worth it?