AI 中文总结
本文介绍AMD SEV-SNP硬件机密计算技术，该技术将hypervisor视为攻击者，通过硬件机制保障虚拟机机密性、完整性与远程可验证性，实现可信执行环境。
AI 中文摘要
本文是关于AMD带安全嵌套分页的安全加密虚拟化（SEV-SNP）的技术入门指南，SEV-SNP是一种硬件级机密计算实现，可为虚拟机提供可信执行环境（TEE）。SEV-SNP将 hypervisor（虚拟机管理程序）视为攻击者，它使用hypervisor永远无法拥有的密钥加密客户机内存和寄存器状态，在访问客户机内存时检测任何篡改行为，并允许客户机向远程验证程序准确证明其正在运行的代码。本文从硬件层面构建这些安全保障，开篇介绍驱动设计的威胁模型及实施该模型的硬件：AMD安全处理器和内存控制器中的加密引擎。随后阐述实现机密客户机的关键机制：反向映射表（Reverse Map Table）可抵御控制页表的攻击者，保障内存完整性；特权与通信机制（VM特权级别、加密的VM保存区及GHCB协议）使客户机能与不可信的hypervisor协同工作；验证流程（attestation pipeline）将硬件签名的客户机初始状态测量值绑定到AMD的证书链，以便远程验证程序可独立确认正在运行的内容。
英文摘要
This paper is a technical primer on AMD Secure Encrypted Virtualization with Secure Nested Paging (SEV-SNP), a hardware confidential computing implementation that provides Trusted Execution Environments (TEEs) for virtual machines. SEV-SNP treats the hypervisor as adversarial. It encrypts guest memory and register state with keys the hypervisor never possesses, detects any tampering with guest memory at the point of access, and lets a guest prove to a remote verifier exactly what code it is running. The paper constructs each of these guarantees from the hardware up. It opens with the threat model that drives the design and the hardware that enforces it, the AMD Secure Processor and the encryption engine in the memory controller. It then develops the mechanisms that make a confidential guest practical. The Reverse Map Table provides memory integrity against an adversary who controls the page tables. The privilege and communication machinery (VM Privilege Levels, the encrypted VM Save Area, and the GHCB protocol) lets the guest cooperate with a hypervisor it does not trust. The attestation pipeline binds a hardware-signed measurement of the guest's initial state to AMD's certificate chain, so a remote verifier can confirm independently what is running.
Comments46 pages, 22 figures
