AMD x86 Memory Encryption Technologies - Secure Memory Encryption and Virtualization

Explore AMD's innovative x86 memory encryption technologies in this informative conference talk by David Kaplan. Gain insights into Secure Memory Encryption (SME) and Secure Encrypted Virtualization (SEV), designed to enhance system security against physical access attacks and provide isolated encrypted virtual machines. Delve into the technical aspects, including ISA changes, security benefits, key management frameworks, and Linux enablement. Learn from Kaplan's expertise as a hardware security architect at AMD, covering topics such as the AMD Secure Processor, hardware architecture, and comparisons with existing technologies. Discover the practical implications for Linux systems and hypervisor modifications, and access public documentation for further understanding of these cutting-edge security features.

Introduction
Agenda
Motivation
Attacks
Hardware Engine
AMD Secure Processor
Secure Memory Encryption
Secure Encrypted Virtualization
Architecture
Example
Secure Communication
Encryption
VMCB
Launch Receipt
Hardware Architecture
Comparison
Linux enablement
Linux SME
hypervisor modifications
public documentation