Answers: <p>Azure's Confidential Computing leverages <a href="https://software.intel.com/en-us/sgx" rel="nofollow noreferrer">Intel® SGX</a> to enable applications run code inside secure enclaves. Intel Software Gaurd Extensions (SGX) use a Memory Encryption Engine that encrypts any enclave data that leaves the CPU cache to the RAM using a key that is only accessible to the processor, preventing attacks such as cold-boot, tapping on the memory bus, etc. It also provides isolation of the enclave's address space from any other entity (including the OS kernel and sudo users).</p>
  
Answers: CC BY-SA 4.0
Answers: 2018-11-29T17:51:32.090Z
Answers: 2018-11-29T17:51:32.090Z
Answers: yanofearth
Answers: <p>The article you are referencing mentions encrypted RAM but that was only a reference to possibilities of enhancing the technology more in the future, not about the current state of confidential computing.</p>
  <p>Confidential computing means, that when data is in use these things are prevented:</p>
  <blockquote>
  <ul>
  <li><p>Malicious insiders with administrative privilege or direct access to hardware on which it is being processed</p>
  </li>
  <li><p>Hackers and malware that exploit bugs in the operating system, application, or hypervisor</p>
  </li>
  <li><p>Third parties accessing it without their consent</p>
  </li>
  </ul>
  </blockquote>
  <p><a href="https://azure.microsoft.com/en-us/blog/introducing-azure-confidential-computing/" rel="noreferrer">according to Microsoft own announcement</a></p>
  <p>So in other words, it is kind of equivalent to encryption and firewall that are seen in communication but this time applied to running programs in a Trusted Execution Environment (TEE), which the term for the area which is protected when server runs a program.</p>
  
Answers: CC BY-SA 3.0
Answers: 2017-10-08T12:11:59.560Z
Answers: When you say ‘container’ I take it you don’t mean docker container right?
Answers: hawkeye
Answers: CC BY-SA 3.0
Answers: 2017-10-08T12:32:13.180Z
Answers: You are right, container only meaning a thing that contains sth inside. Microsoft speaks about Trusted Execution Environment (TEE). I'll edit my answer.
Answers: mico
Answers: CC BY-SA 3.0
Answers: 2017-10-08T11:46:38.160Z
Answers: 2017-10-08T12:37:40.847Z
Answers: 2020-06-18T08:28:10.803Z
Answers: mico
Body: <p>I'm trying to wrap my head around the Azure <a href="https://azure.microsoft.com/en-au/blog/introducing-azure-confidential-computing/" rel="noreferrer">confidential computing</a> <a href="https://arstechnica.com/gadgets/2017/09/azure-confidential-computing-will-keep-data-secret-even-from-microsoft/" rel="noreferrer">offering</a>. </p>
  
  <p>It appears that that AWS does not offer encryption at the application level (see diagram for what I mean by this:)</p>
  
  <p><a href="https://i.sstatic.net/pMynl.png" rel="noreferrer"><img src="https://i.sstatic.net/pMynl.png" alt="enter image description here"></a></p>
  
  <p>My question is: <strong>Is Azure's confidential computing essentially encrypted RAM?</strong></p>
  
Tags: <amazon-ec2><azure><encryption>
Title: Is Azure's confidential computing essentially encrypted RAM?
UserDisplayName: hawkeye
ThreadText: # Is Azure's confidential computing essentially encrypted RAM?
  
  (Asked by: username_0 on 2017-10-08)
  
  I'm trying to wrap my head around the Azure [confidential computing](https://azure.microsoft.com/en-au/blog/introducing-azure-confidential-computing/) [offering](https://arstechnica.com/gadgets/2017/09/azure-confidential-computing-will-keep-data-secret-even-from-microsoft/).
  
  It appears that that AWS does not offer encryption at the application level (see diagram for what I mean by this:)
  
  [![enter image description here](https://i.sstatic.net/pMynl.png)](https://i.sstatic.net/pMynl.png)
  
  My question is: **Is Azure's confidential computing essentially encrypted RAM?**
  
  **Tags:** amazon-ec2, azure, encryption
  
  
  ---
  
  ## 2 answers
  
  ### Answer by username_2 on 2017-10-08. Score: 6 | Accepted answer
  
  The article you are referencing mentions encrypted RAM but that was only a reference to possibilities of enhancing the technology more in the future, not about the current state of confidential computing.
  
  Confidential computing means, that when data is in use these things are prevented:
  
  > * Malicious insiders with administrative privilege or direct access to hardware on which it is being processed
  > * Hackers and malware that exploit bugs in the operating system, application, or hypervisor
  > * Third parties accessing it without their consent
  
  [according to Microsoft own announcement](https://azure.microsoft.com/en-us/blog/introducing-azure-confidential-computing/)
  
  So in other words, it is kind of equivalent to encryption and firewall that are seen in communication but this time applied to running programs in a Trusted Execution Environment (TEE), which the term for the area which is protected when server runs a program.
  
  > **Comments:**
  > **username_0**: When you say ‘container’ I take it you don’t mean docker container right?  
  > **username_2**: You are right, container only meaning a thing that contains sth inside. Microsoft speaks about Trusted Execution Environment (TEE). I'll edit my answer.  
  
  ---
  
  ### Answer by username_1 on 2018-11-29. Score: 1
  
  Azure's Confidential Computing leverages [Intel® SGX](https://software.intel.com/en-us/sgx) to enable applications run code inside secure enclaves. Intel Software Gaurd Extensions (SGX) use a Memory Encryption Engine that encrypts any enclave data that leaves the CPU cache to the RAM using a key that is only accessible to the processor, preventing attacks such as cold-boot, tapping on the memory bus, etc. It also provides isolation of the enclave's address space from any other entity (including the OS kernel and sudo users).
  
  
  ---
  
  