CuraSec

tag: Confidential-Computing · 5 items

2026-10-12 · arXiv cs.CR · source ↗ #confidential-computing#sgx#amd-sev
  • Engineer — Learn: TEEVisor’s nested TEE architecture addresses real SGX limitations (slow transitions, no intra-enclave isolation) with under 5% overhead on AMD EPYC — worth tracking if your team runs SGX workloads in cloud CVMs, but no systems changes required today.
  • SOC/IR — Skip
  • Leader — Skip
  • Engineer — Learn: DDRop undermines the threat model for confidential computing by exploiting memory write-drop behavior — engineers relying on TDX or SEV-SNP for workload isolation should understand this weakens TEE guarantees when supply-chain or physical access is a concern. No patch is applicable; audit whether your confidential-computing deployments assume physical integrity of the host.
  • SOC/IR — Skip
  • Leader — Learn: If your organization uses confidential computing (Intel TDX/AMD SEV-SNP) to satisfy compliance or data-isolation commitments, this research narrows the assurance claim — physical access plus software control can defeat those guarantees. File for the next risk-register review, no immediate action required.
  • Engineer — Learn: Novel research on reducing TCB in confidential VMs by enforcing intra-process data isolation at the hardware level via Arm CCA — no running system changes needed today, but relevant for teams designing workloads on Arm-based confidential compute platforms.
  • SOC/IR — Skip
  • Leader — Skip
  • Engineer — Learn: Novel matrix-multiplication masking protocol enabling private transformer inference on untrusted servers, backed by LWE/LPN hardness assumptions; no action needed today, but worth tracking if evaluating secure enclaves or confidential computing architectures for AI workloads.
  • SOC/IR — Skip
  • Leader — Skip
  • Engineer — Learn: Academic proposal combining Intel TDX, Intel Trust Authority, and NVIDIA Confidential Computing into a decentralized CVM platform — worth reviewing if you’re evaluating confidential compute options for protecting model weights or training data, but no production tooling or immediate action follows from this paper.
  • SOC/IR — Skip
  • Leader — Skip