Re:Confidential VMs
by nellydpa on Tuesday July 14, 2020 @09:52AM
(#23831955)
SEV is targeted to the VM instances, with a single key per VM.
SME is applicable to the entire server, similar to total memory encryption with a single key for all host kernel/machine. SME is not super applicable to the cloud, more suitable for a single server environments.
[ Parent
| on HN ]
That doesn't tell me what mode of AES it is, that's key management.
AES 128bits