patternMinor
Is Azure's confidential computing essentially encrypted RAM?
Viewed 0 times
encryptedessentiallyazureramconfidentialcomputing
Problem
I'm trying to wrap my head around the Azure confidential computing offering.
It appears that that AWS does not offer encryption at the application level (see diagram for what I mean by this:)
My question is: Is Azure's confidential computing essentially encrypted RAM?
It appears that that AWS does not offer encryption at the application level (see diagram for what I mean by this:)
My question is: Is Azure's confidential computing essentially encrypted RAM?
Solution
The article you are referencing mentions encrypted RAM but that was only a reference to possibilities of enhancing the technology more in the future, not about the current state of confidential computing.
Confidential computing means, that when data is in use these things are prevented:
-
Malicious insiders with administrative privilege or direct access to hardware on which it is being processed
-
Hackers and malware that exploit bugs in the operating system, application, or hypervisor
-
Third parties accessing it without their consent
according to Microsoft own announcement
So in other words, it is kind of equivalent to encryption and firewall that are seen in communication but this time applied to running programs in a Trusted Execution Environment (TEE), which the term for the area which is protected when server runs a program.
Confidential computing means, that when data is in use these things are prevented:
-
Malicious insiders with administrative privilege or direct access to hardware on which it is being processed
-
Hackers and malware that exploit bugs in the operating system, application, or hypervisor
-
Third parties accessing it without their consent
according to Microsoft own announcement
So in other words, it is kind of equivalent to encryption and firewall that are seen in communication but this time applied to running programs in a Trusted Execution Environment (TEE), which the term for the area which is protected when server runs a program.
Context
StackExchange DevOps Q#2267, answer score: 6
Revisions (0)
No revisions yet.