Securing Memory at EPYC Scale

Re:Securing Memory at EPYC Scale by mahmoudimus on Friday February 28, 2020 @01:54PM (#22445260)

I have been following this space very closely as we're planning some killer roadmap use cases at my place of employment. This has been in the works for sometime after the interest in Intel's SGX + AMD's SEV environment that delivered subpar results.

Yesterday, Intel announced that Multi-Key Total Memory Encryption is coming to CPUs (https://arstechnica.com/gadgets/2020/02/intel-promises-full-...) and it's very exciting to see this space heat up.

If you're interested in embedded systems and data security is interesting to you, we are hiring! (send me an email - mahmoud @ linux dot com).

[ Parent | on HN ]

Re:Securing Memory at EPYC Scale by saagarjha on Friday February 28, 2020 @08:17PM (#22447963)

What are you using this for?

[ Parent | on HN ]

Re:Securing Memory at EPYC Scale by mahmoudimus on Saturday February 29, 2020 @07:56PM (#22454357)

Running "serverless" functions on https://github.com/bytecodealliance/lucet which is running in these enclaves provides a relatively simple way to offer "confidential computing" to offer an alternative against "semi-honest" (or sometimes known as "honest-but-curious") adversarial threat models.

[ Parent | on HN ]

Re:Securing Memory at EPYC Scale by mahmoudimus on Saturday February 29, 2020 @07:57PM (#22454360)

If you're interested in this, you can see a very high level overview here: https://crypto.stanford.edu/pbc/notes/crypto/sfe.html

Again, if this interests you, we would love to talk to you! mahmoud -@- linux dot com!

[ Parent | on HN ]