Friedrich Vandenberghe

How can you protect your sensitive data and algorithms, even if they’re residing on untrusted devices? Encrypting the data on the disk is not sufficient. A hardware-based confidential computing environment, however, protects the data even in this case. Normally, all data and algorithms on a device are accessible to someone who has root access to the device. This can be a competitor trying to steal your algorithms or an adversary trying to steal your user’s data. Even if it would’ve been encrypted on the disk, the adversary still has access to the decryption keys. However, placing this sensitive information in a confidential computing environment addresses these challenges.