Intel® Trust Domain Extensions (Intel® TDX) is Intel's newest confidential computing technology. This hardware-based trusted execution environment (TEE) facilitates the deployment of trust domains (TD), which are hardware-isolated virtual machines (VM) designed to protect sensitive data and applications from unauthorized access.

Intel TDX Security Assurance. Intel and industry partners collaborated on advanced security assurance actions to ensure Intel TDX provides robust security. Security assurance actions included hackathons, offensive security research, enhanced SDL, and more.

2023年4月24日 · Intel TDX is designed to isolate VMs from the virtual-machine manager (VMM)/hypervisor and any other non-TD software on the platform to protect TDs from a broad range of software. VM isolation with Intel TDX is a key component of Intel’s Confidential Computing portfolio, which also includes application isolation with Intel SGX and trust ...

This whitepaper introduces a solution to protect the runtime integrity of a VM based on Intel® Trust Domain Extensions (Intel® TDX) using Integrity Measurement Architecture (IMA) technology and the related attestation process.

Intel TDX version 2.0 extends Intel TDX to support Trusted Execution Environment for device I/O (TEE-IO). This article describes security-related performance considerations of Intel TDX and addresses performance based on specific types of workloads (CPU or …

2024年4月25日 · In this article, we provide a top-down review of Intel TDX, covering its security principles, threat model, underpinning technologies, system architecture, and future features. We then dive deeper into the design of the TDX Module, …

Intel® Trust Domain Extensions (Intel® TDX) is Intel's newest confidential computing technology. This hardware-based trusted execution environment (TEE) facilitates the deployment of trust domains (TD), which are hardware-isolated virtual machines (VM) designed to protect sensitive data and applications from unauthorized access.

2024年1月18日 · 本文详细介绍了英特尔tdx技术，一种用于部署硬件隔离虚拟机的信任域，以增强内存机密性、cpu状态保护和安全特性。tdx通过内存加密、地址转换一致性及远程验证等功能，提升云服务的数据安全和ip保护，同时讨论了其威胁模型和未来发展方向。

On a technical level, TDX implements its security guarantees via two mechanisms. Before storing data to RAM, TDX encrypts it using AES-XTS to mitigate physical attacks on the DRAM. While processed inside the CPU, the data is stored in plaintext.

Intel Trust Domain Extensions (TDX) is a CPU-level technology proposed by Intel in May 2021 for implementing a trusted execution environment in which virtual machines (called "Trust Domains", or TDs) are hardware-isolated from the host's Virtual Machine Monitor (VMM), hypervisor, and other software on the host. This hardware isolation is ...