The Power of Confidential Computing: Exploring Open Source Projects
summary
Overview of concrete tools and results rather than promises of privacy A catalogue of OSS components that run in hardware attested TEEs with examples and tradeoffs For legacy Linux apps use Occlum or Gramine and expect Intel SGX compatibility For new stacks use Keystone on RISC V for modular primitives For serverless confidential workloads try Enarx For confidential VMs at cloud scale try COCONUT‑SVM on AMD The talk lists active projects, deployment targets, and three open mentorships for hands on contribution
AI-written summary · about
chapters (13)
- 0:00Introduction and agenda
- 0:21What is confidential Computing
- 1:45Why use trusted execution environments
- 2:50Secure primitives and threat models
- 4:17Keystone project deep dive
- 5:01CCC project portfolio overview
- 5:44Serverless and privacy projects
- 6:28Keystone and modular TE design
- 7:08Legacy app support tools
- 7:50Remote attestation protocols
- 8:11AMD-based confidential projects
- 8:56New confidential data clean room
- 9:36Mentorship program opportunities
related talks
16mIntroduction to confidential computing
11mLightning Talk: Computing Confidentially in the Clouds
37mIt's All About Trust: Why Confidential Computing Matters
23mConfidential computing: from niche to mainstream
36mEverybody is talking about Confidential Computing - the minimum Devs should know
30mK8s meets confidential computing - the different ways of scaling sensitive workloads
40mKubernetes Meets Confidential Computing - The Different Ways of Scaling Sensitive...- 37mIt's All About Trust: Why Confidential Computing Matters