Here's AMD's documentation about it: https://developer.amd.com/sev/

It just encrypts memory pages and registers with a key that the host and other guests can't get.