Keynote: Attested, Transparent, Sovereign: The Evolution of Confidential Computing
summary
Microsoft describes moving core services into hardware TEEs: Entra token signing and Microsoft account token signing run 100% inside TEEs, Windows licensing keys and Xbox XKMS migrate into Azure confidential compute, and a cloud confidential container now enables passkey roaming between devices. Confidential clean rooms with Spark Analytics (preview) let parties run attested queries without revealing raw data. A Microsoft signing transparency service issues ledgered receipts for reproducible or attested builds, and a planned virtual data diode implements confidential tenancy to cryptographically enforce customer data egress policy.
AI-written summary · about
chapters (15)
- 0:00Introduction
- 0:21Confidential computing predictions
- 1:02Microsoft’s confidential computing decade
- 2:06Confidential computing fundamentals
- 3:51Trust boundary explained
- 5:57Signing keys with TEEs
- 7:23Migrating payment services
- 9:05Licensing in confidential computing
- 10:29Passkey roaming with containers
- 11:31Multiparty computation in clean rooms
- 12:34Transparent confidential vision
- 15:44Signing transparency service
- 16:24Removing Microsoft from trust
- 17:26Virtual data diode for sovereignty
- 18:28Evolution to confidential tenancy
related talks
40mDon’t Trust Opaque Clouds, Cryptographically Verify Instead!
47mThe Rise of Confidential Computing, What It Is and What it Means to You
37mIt's All About Trust: Why Confidential Computing Matters
11mLightning Talk: Computing Confidentially in the Clouds- 37mIt's All About Trust: Why Confidential Computing Matters
36mCTO Panel: The Impact of Confidential Computing with Intel, Azure, AMD & NVIDIA
39m"I Didn't Peek: and I Can Prove It": Confidential Computing for Audits and Regulators
16mIntroduction to confidential computing