3 ms·
It's worth noting that AWS has had this sort of infrastructure with Nitro for quite some time now: https://aws.amazon.com/ec2/nitro/nitro-enclaves/ https://aws
by conradev 2y ago
It's worth noting that AWS has had this sort of infrastructure with Nitro for quite some time now:
https://aws.amazon.com/ec2/nitro/nitro-enclaves/ https://aws.amazon.com/ec2/nitro/nitro-enclaves/
At some point it was novel to put a separate hardware root of trust on a PCI-e card but I think that was a while ago, even for Apple!
- abalone 2y agoNitro is good! And showcases a great many of the foundational architectural concepts in PCC. But there is a major difference that is germane to the topic of Apple’s investment in US server manufacturing: The hardware root of trust. Hardware tampering is the weak point and afaik AWS doesn’t describe any process to certify their supply chain integrity. I think the most they’ve done is commission a review of their architecture document.[1] PCC actually has an auditor sign each server node in the datacenter. Thank you for mentioning them though. It’s an important advancement in generally available confidential computing infrastructure. [1] https://aws.amazon.com/blogs/compute/aws-nitro-system-gets-independent-affirmation-of-its-confidential-compute-capabilities/ https://aws.amazon.com/blogs/compute/aws-nitro-system-gets-i...