Shirt a Phobia

Sample Page

Intel Trust Domain Extensions (Intel TDX) is a CPU-level technology proposed by Intel in May 2021 for implementing a trusted execution environment in which virtual machines (called “Trust Domains”, or TDs) are hardware-isolated from the host’s Virtual Machine Monitor (VMM), hypervisor, and other software on the host. This hardware isolation is intended to prevent threat actors with administrative access or physical access to the virtual machine host from compromising aspects of the TD virtual machine’s confidentiality and integrity. Intel TDX also supports a remote attestation feature which allows users to determine that a remote system has Intel TDX protections enabled prior to sending it sensitive data.[1]

Intel TDX is of particular use for cloud providers, as it increases isolation of customer virtual machines and provides a higher level of assurance that the cloud provider cannot access the customer’s data.[2][3][4][5]

Intel TDX was described in and is pending US patent number 20210141658A1.[6]

Architecture overview

Intel TDX consists of multiple components including Virtual Machine Extensions (VMX) instruction set architecture (ISA) extensions, a technology for memory encryption, and a new CPU operation mode called SEAM (“Secure Arbitration Mode”), which hosts the Intel TDX Module.[7]

Memory protections

Intel TDX defines two classes of memory: shared memory and private memory. Shared memory is intended to be used for communicating with the TD host and may receive some Intel TDX protections. Private memory received full Intel TDX confidentiality and integrity protections.

Intel TDX implements memory protection by encrypting the TD’s memory with a per-TD AES-XTS 128-bit key. To avoid leaking ciphertext, memory access is limited to being from the SEAM mode and direct memory access is unavailable. If memory integrity protections are enabled, a MAC using SHA-3-256 is generated for the private memory and if the MAC validation fails, the TD VM is terminated. TD VM registers are also kept confidential by storing them in a per-TD save state and scrubbing them when the TD returns control to the VMM.[1][8]

Guest-hypervisor communication

Intel TDX provides hardware isolation of TD VMs by brokering all VMM to TD communication through the Intel TDX Module and preventing the VMM from accessing the TD’s data. The VMM communicates to the Intel TDX Module using new SEAMCALL and SEAMRET CPU instructions. SEAMCALL is used by the VMM to invoke the Intel TDX module to create, delete, or execute a TD. SEAMRET is used by the Intel TDX Module to return execution back to the VMM.[1][9][10]

Remote attestation

Intel TDX’s remote attestation feature builds on the Intel SGX technology to allow someone to determine that a remote TD has Intel TDX protections enabled prior to sending it sensitive data. The remote attestation report can be generated by the Intel TDX Module calling the SEAMREPORT instruction. The SEAMREPORT instruction generates a MAC-signed “Report” structure which includes information such as the version numbers of the Intel TDX’s components. The VMM would then use Intel SGX enclaves to convert that “Report” structure into a remotely verifiable “Quote”, which it would send to the system requesting attestation.[1]

Hardware and operating system support

Intel TDX was introduced with some special SKUs of 4th Gen Intel Xeon Scalable processors (codename Sapphire Rapids) and it is broadly available with all Intel Xeon processors since 5th Gen Intel Xeon Scalable processors (codename Emerald Rapids).[11]

First patches to support Intel TDX technology in the Linux kernel were posted in the Linux kernel mailing list around June 2021,[12] were merged on May 24, 2022, and were included in the mainline Linux Kernel version 5.19.[13]

Microsoft Azure has announced that as of April 24, 2023 their new DCesv5-series and ECesv5-series virtual machines would support Intel TDX.[14] They have also published information how to use Intel TDX as part of Microsoft Azure Attestation.[15]

Comparisons to SGX

Intel TDX is somewhat similar to Intel SGX, as in that both are implementations of trusted execution environments. However, they are significantly different in the scope of the protections and that Intel SGX requires that applications be rewritten to support Intel SGX, while Intel TDX only requires support at the hardware and operating system levels.[16] On the VMM host, Intel TDX involves the use of SGX enclaves to enable support for remote attestation. Additionally, even an operating system which does not support running as a TD VM can be protected by being launched as a nested VM within a TD VM.[1]

References

  1. ^ a b c d e “Intel® Trust Domain Extensions” (PDF). February 2022.
  2. ^ “How Google and Intel make Confidential Computing more secure”. 24 April 2023. Retrieved 20 September 2023.
  3. ^ Cheng, Pau-Chen (27 March 2023). “Intel TDX Demystified: A Top-Down Approach”. arXiv:2303.15540 [cs.CR].
  4. ^ Sardar, Muhammad Usama; Musaev, Saidgani (7 June 2021). “Demystifying Attestation in Intel Trust Domain Extensions via Formal Verification”. IEEE Access. 9: 83067–83079. Bibcode:2021IEEEA…983067S. doi:10.1109/ACCESS.2021.3087421. S2CID 235455870.
  5. ^ Bartock, Michael; Souppaya, Murugiah; Savino, Ryan; Knoll, Tim; Shetty, Uttam; Cherfaoui, Mourad; Yeluri, Raghu; Malhotra, Akash; Banks, Don; Jordan, Michael; Pendarakis, Dimitrios; Rao, J. R.; Romness, Peter; Scarfone, Karen (May 2022). NIST IR 8320 Hardware-Enabled Security: Enabling a Layered Approach to Platform Security for Cloud and Edge Computing Use Cases (Report). doi:10.6028/NIST.IR.8320.
  6. ^ US application 20210141658A1, Ravi Sahita, Vedvyas Shanbhogue, ”Method and apparatus for trusted devices using trust domain extensions”, published 2020-11-11 
  7. ^ “Intel® Trust Domain Extensions (Intel® TDX)”. Retrieved 7 November 2021.
  8. ^ “20. Intel Trust Domain Extensions (TDX)”. Retrieved 5 September 2023.
  9. ^ “Guest Hypervisor Communication Interface (GHCI) for Intel® Trust Domain Extensions (Intel® TDX)1.5” (PDF). March 2023.
  10. ^ “Intel® TDX Feature Readiness by Intel® Xeon® Processor Generation”. 24 February 2026.{{cite web}}: CS1 maint: url-status (link)
  11. ^ “What Intel® Xeon Processors Support for Intel® Trust Domain Extensions (Intel® TDX)?”. Retrieved 5 September 2023.
  12. ^ “Add INTEL_TDX_GUEST config option to selectively compile TDX guest support”. 18 June 2021.
  13. ^ “x86/tdx for 5.19”. 24 May 2022.
  14. ^ “Preview: Introducing DCesv5 and ECesv5-series Confidential VMs with Intel TDX”. 24 April 2023. Retrieved 5 September 2023.
  15. ^ “Azure Attestation EAT profile for Intel® Trust Domain Extensions (TDX)”. 19 October 2023. Retrieved 20 November 2023.
  16. ^ “Intel SGX vs TDX: what is the difference?”. 27 July 2022.