Re:New cloud attack takes full control of virtual machines w...
by willvarfar on Friday September 02, 2016 @03:26PM
(#12415595)
But encryption will prevent dedupe meaning a vm cannot attack other occupants as described in the article.
Intel's encrypted RAM is authenticated quite nicely, but it's not (yet?) designed for general purpose use -- it's for SGX only right now. Using it for everything would (if I understand correctly) add considerable space overhead and possibly considerable latency.