Supported Technologies

As of now, there is no standard that defines the identity of workload, be it the identity of a VM, kubernetes node, or pod. Nitride implements a universal attestation profile, abstracting out the various attestation platform vendors and cloud service providers implement and provides a universal format.

By platform

Intel

• Intel Security Guard Extension (SGX) v2.0 available on Xeon 3rd gen

• Intel Trusted Domain Extension (TDX) v1.0 available on Xeon 5th gen

AMD

• ARM Secure Encrypted Virtualization with secure nested pages (SEV SNP) available on Epyc 3rd gen

ARM

ARM confidential compute architecture (CCA) available on Cortex A9

By hypervisor

KVM

• KVM/Qemu virtualization on Linux kernel 6.1+

• KVM/Qemu nested virtualization on Linux kernel 6.1+

VMWare

• vSphere 8 Update 2 with SGX support

• vSphere 9 with SEV and TDX support (coming soon)