Chains of trust in Confidential Computing
summary
Explains how chains of trust turn memory encryption into usable confidentiality: hardware roots, measured boot, endorsements, verifiers and secret/key brokers produce decryption keys. Covers AMD SEV/SNP (early SEV had exploitable flaws), Intel TDX, Arm CCA, plus supporting pieces like a virtual TPM and attested TLS. Contrasts pre‑attestation and post‑attestation models, shows Kata runtime already doing remote attestation, and a constellation-by-Edgeless confidential cluster that boots five nodes (takes ~40 minutes) and successfully mutual‑authenticates.
AI-written summary · about
chapters (11)
- 0:00Confidential Computing intro
- 3:54Root of trust explained
- 7:21What is Attestation and Why It Matters
- 11:11REMITS trust pipeline
- 14:22Cryptographic proof of trust
- 18:18Trust in Confidential VMs
- 20:25Confidential containers in Kubernetes
- 22:34Attestation in practice
- 26:49Platform tech for confidential computing
- 31:08Key takeaways and myths
- 32:12Hardware needs and alternatives
related talks
37mIt's All About Trust: Why Confidential Computing Matters- 37mIt's All About Trust: Why Confidential Computing Matters
36mEverybody is talking about Confidential Computing - the minimum Devs should know
28mSealed for All: Multi-Party Confidential Computing, No Trust
42mSponsored Session: Confidential Computing - New Capabilities for New Workloads
40mDon’t Trust Opaque Clouds, Cryptographically Verify Instead!
47mThe Rise of Confidential Computing, What It Is and What it Means to You
16mIntroduction to confidential computing