Confidential Computing Is Not Broken: A Calm Look at the RA-TLS Attestation Flaw
B Foing·
In January, security researchers presented a formal-methods result to the IETF SEAT working group. A…
Read more →Blog
Insights and updates from the Privasys team.
Enclave Vaults Speaks PKCS#11 and KMIP
B Foing·
Two earlier posts set out where Enclave Vaults had reached. In the v0.19 redesign the vault became a…
Read more →Prove It Without Giving It Away: Introducing Privasys ID
B Foing·
For as long as the internet has asked us to prove things about ourselves, it has asked us to do it t…
Read more →Rotating Encryption Keys on a Confidential VM
B Foing·
Key rotation is one of those security expectations everyone agrees on and few enjoy implementing. Au…
Read more →Same Prompt, Same Answer: Reproducible Inference and the Accountability Gap
B Foing·
A loan application is declined. A payment is flagged and frozen. A patient record is summarised, and…
Read more →Deploy Agents People Can Verify: Introducing the Privasys CLI
B Foing·
Agents are being built at an extraordinary pace. Frontier models have made it cheap to assemble serv…
Read more →Know Your RTMRs Before You Boot: Predicted Measurements for Every CVM Image Release
B Foing·
When we wrote about our CVM base images in April, the punchline was that a hardened, immutable image…
Read more →Upgrading an Enclave Without Handing It Your Data
B Foing·
A confidential application is never finished. It needs the same things every other piece of software…
Read more →Choosing a Model for Confidential Inference: Qwen 3.6, a 256k Context, and One Very Busy H100
B Foing·
We have written before about the plumbing of confidential AI: the GPU ceremony that brings an H100 i…
Read more →Enclave Vaults v0.19: Typed Keys and Policy-Driven Operations
B Foing·
A few weeks ago we wrote about rethinking secrets management for the age of confidential computing. …
Read more →Bringing Attestation to the Browser: The Session-Relay Pattern
B Foing·
Confidential computing makes a strong promise. The hardware can prove, cryptographically, what code …
Read more →Confidential AI on H100: The CPU/GPU Ceremony and the Driver Patches Behind It
B Foing·
The previous post in this series described the base images we build for confidential VMs: minimal Ub…
Read more →CVM Base Images: What We Build, and Why We Don't Use the Cloud Provider's
B Foing·
Every confidential workload we run starts from the same boring artefact: a few hundred megabytes of …
Read more →Per-Function Auth for WASM Enclaves: From WIT Annotations to Hardware-Enforced Access Control
B Foing·
In our last post we introduced Privasys Wallet, a mobile authenticator that verifies enclave attesta…
Read more →FIDO2 for Attested Enclaves: Two-Way Trust Between Your Phone and the Cloud
Privasys Engineering Team·
Authentication has always been a one-way street. You prove who you are to the server. The server tel…
Read more →From WIT to MCP: How WASM Enclaves Become Attested Tool Servers
B Foing·
One of the things we love about WebAssembly is that it finally gives us a proper type system at the …
Read more →Enclave Vaults: Rethinking Secrets Management for the Age of Confidential Computing
B Foing·
Every secrets management system, from a €100,000 HSM appliance to a HashiCorp Vault cluster, faces t…
Read more →Hardened Guest Images for Confidential VMs: Closing the Gap Between Memory Encryption and Verifiability
B Foing·
Intel TDX and AMD SEV-SNP encrypt a virtual machine's memory so that even the hypervisor and cloud p…
Read more →Beyond Code Identity: Why Attestation Must Cover Configuration
B Foing·
Remote attestation is the mechanism that makes Confidential Computing trustworthy. Without it, a TEE…
Read more →WebAssembly Inside Enclaves: A New Model for Confidential Applications
Privasys Engineering Team·
For the past decade, Confidential Computing has focused on one core promise: protect data while it i…
Read more →A Practical Guide for an Attested Web
Privasys Engineering Team·
The Trust Problem in Confidential Computing Confidential Computing promises that data stays encrypte…
Read more →Confidential AI: From Isolated Enclaves to a Unified Fabric
B Foing·
It has been ten years since the introduction of Confidential Computing with Intel SGX. As someone wh…
Read more →Why Confidential Computing Matters for AI
Privasys Team·
Artificial intelligence is transforming every industry, but it comes with a critical challenge: how …
Read more →