AMDs new Confidential Computing feature in Epyc 9005 / Zen 5

[hpvd]

AMDs new Confidential Computing feature in Epyc 9005 / Zen 5: Trusted I/O (AMD SEV-TIO)

Overview of AMDs Confidential Computing Hardware progress to Epyc 9005 / Zen 5

https://www.servethehome.com/wp-content/uploads/2024/10/AMD-EPYC-9005-Turin-Trusted-IO.jpg

[hpvd]

looks pretty interesting and useful to me:

AMD TRUSTED I/O, introduced in EPYC 9005 Series processors,
establishes a framework for securing virtualized I/O paths. The
feature supports the PCI-SIG TDISP standard that mutually
authenticates the VM and the device, then establishing an
encrypted connection. Consider, for example, running ML training
in a cloud service provider environment. You don’t want your
training data to be transferred to a GPU you don’t trust, and SEV
provides the framework for ensuring mutual trust and security
of data in flight. Full details of trusted I/O and how it uses
attestation is available in the AMD white paper AMD SEV-TIO:
Trusted I/O for Secure Encrypted Virtualization:
https://www.amd.com/content/dam/amd/en/documents/epyc-business-docs/white-papers/sev-tio-whitepaper.pdf

[hpvd]

This looks also promising:
Commitment to Open Security Technologies in the Data Center
https://community.amd.com/t5/corporate/amd-s-commitment-to-open-security-technologies-in-the-data/ba-p/715954