Trustworthy confidential virtual machines for the masses

arXiv:2402.15277v1 Announce Type: new
Abstract: Confidential computing alleviates the concerns of distrustful customers by removing the cloud provider from their trusted computing base and resolves their disincentive to migrate their workloads to the cloud. This is facilitated by new hardware extensions, like AMD's SEV Secure Nested Paging (SEV-SNP), which can run a whole virtual machine with confidentiality and integrity protection against a potentially malicious hypervisor owned by an untrusted cloud provider. However, the assurance of such protection to either the …

amd arxiv base can cloud cloud provider computing confidential confidential computing cs.cr cs.dc customers extensions hardware machines nested run virtual virtual machines workloads