Introduction
Confidential computing is a hardware-based technology that safeguards data during processing. For Arm-architecture processors, this is implemented via TrustZone and Confidential Compute Architecture (CCA) technologies.
Trusted execution environments (TEEs) of traditional TrustZone solutions are dedicated to terminal devices. Trusted applications (TAs) can run in the TEE OS only after being authenticated by terminal device vendors, but cannot be used in general-purpose computing. The CCA Kit is a next-generation confidential computing technology implemented in virtual machines (VMs). It is compatible with the existing application ecosystem and extends confidential computing from the application layer to the OS layer. This document mainly describes the software architecture and features of the Confidential Computing CCA Kit powered by a new Kunpeng 950 processor model. It also explains how to set up the CCA Kit environment and use confidential virtual machines (cVMs).
Feature Name |
Feature Description |
Application Scenario |
|---|---|---|
Remote attestation |
Proves the trustworthiness of cVMs and confidential computing platforms to users, including:
|
Confidential cloud server, data safe, and trusted data space |
Confidential device passthrough |
Switches PCIe devices into a confidential computing environment and passes them through to cVMs to protect data-in-transit. |
AI data model protection, confidential cloud hosts, and secure data vaults |
SM acceleration |
Enhances SM algorithm performance and enables algorithm offload through the KAE in cVMs. |
Secure data vaults and cryptographic computing |
Confidential containers |
Supports launching Kata confidential containers within cVMs to provide container-based confidential computing management capabilities. |
AI Agent and trusted data space |