AMD Encrypted Virtualization Update
summary
Update on AMD SEV progress: Linux kernel support is upstream (SME in 4.14, SEV guest bits in 4.15, KVM hooks in 4.16), QEMU/KVM + OVMF tooling runs SEV VMs and a demo shows dd memory dumps returning ciphertext vs plaintext for encrypted guests. SEV-ES adds register-state encryption and a GHCB-based exception protocol; a GHCB software spec is posted and migration prototype and ICV tooling live on public GitHub. Work continues on migration, save/restore, GPU DMA fixes, and Kata Containers integration. SEV SEV-ES GHCB
AI-written summary · about
chapters (11)
- 0:00Introduction
- 3:18How it works
- 5:50Demo
- 8:17Whats been going on
- 13:21VM Exits
- 15:47Standardizing
- 18:12Protocol
- 19:08Feedback
- 22:51Containers
- 23:38Hardware Virtualization
- 25:22Questions
related talks
30mEnabling AMD SEV in Xen
44mAMD x86 Memory Encryption Technologies
23mDemystifying Confidential Computing: An update for enthusiasts & professionals
19mSecuring Linux VM boot with AMD SEV measurement
34mSEV-SNP Development Status Update
25mProtecting from MaliciousHypervisor Using AMD SEV-SNP
21mSecure Live Migration of Encrypted VMs
11mSecure TSC for AMD SEVSNP guests