This answer covers it well: https://security.stackexchange.com/a/189978 https://security.stackexchange.com/a/189978 Basically depending on the scenario, DMA re

This answer covers it well: https://security.stackexchange.com/a/189978 https://security.stackexchange.com/a/189978 Basically depending on the scenario, DMA region will either be unencrypted or transparently encrypted/decrypted.