这是indexloc提供的服务,不要输入任何密码
Skip to content

How is the GPU-side attestation implemented? #79

@zL1nX

Description

@zL1nX

Thanks for this detailed repository about remote attestation on the host side for verification. However, there seems to be little information about how things are implemented on the device side. For example, I am wondering how the evidence is generated by the (H-100) GPU. Which component of the GPU conducts the signing operation? And how is SPDM communication handled in GPU?

I notice that there is a open-source SPDM implementation of Nvidia with both the requester and the responder involved. It it related to this repo or the above questions?

I read the docs and searched the web but there is no specific description about the operations or functions on the GPU side. I am not sure whether they are publicly available (Or I miss something). Thanks for any information in advance!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions