Comment Comment by natesales The keys are generated on the CPU and never leave the enclave, but the data is decrypted on the CPU so it hits the registers in plaintext.When the enclave starts, the CPU does a few things:1. The CPU does a key exchange with the GPU (in confidential compute mode [1]) to derive a key to encrypt data over PCIe2. The CPU verifies the integrity of the GPU against NVIDIA's root of trust [2][1] https://developer.nvidia.com/blog/confidential-computing-on-...[2] https://github.com/tinfoilsh/cvmimage/blob/b65ced8796e8a8687...edit: formatting parent natesales 1 year ago
When the enclave starts, the CPU does a few things:
1. The CPU does a key exchange with the GPU (in confidential compute mode [1]) to derive a key to encrypt data over PCIe
2. The CPU verifies the integrity of the GPU against NVIDIA's root of trust [2]
[1] https://developer.nvidia.com/blog/confidential-computing-on-...
[2] https://github.com/tinfoilsh/cvmimage/blob/b65ced8796e8a8687...
edit: formatting