AMD Encrypted Virtualization Update – David Kaplan, AMD
AMD Encrypted Virtualization Update – David Kaplan, AMD
This talk will update the community on Linux support for the AMD Secure Encrypted Virtualization (SEV) features discussed in past Linux Security Summits. In particular, David will discuss the current state of hardware and open source software support, especially around the new Encrypted State (SEV-ES) feature. The talk will further discuss how AMD is working with the community to create a multi-vendor standard for VM to hypervisor communication for emulated events, and the challenges being encountered. Finally, this talk will also discuss new applications of AMD SEV technology to areas outside of traditional virtualization, such as containers (e.g. Kata Containers), and how this support may evolve in the future.
About David Kaplan
David is a Fellow at AMD who focuses on developing new security technologies across the AMD product line as part of the Security Architecture Research and Development center. He is the lead architect for the AMD memory encryption features and has worked on both CPU and SOC level security features for the last 7 years. David has over 12 years of experience at AMD, has filed over 40 patents in his career so far, and spoken at events including Linux Security Summit, ISCA, USENIX Security, and CCC.
by The Linux Foundation
linux foundation
