"Running Mushroom on Intel TDX" ( 2025 )

Saturday at 14:00, 20 minutes, K.4.401, K.4.401, Confidential Computing Tom Dohrmann , slides , video

Mushroom is a project for securely running Linux workloads in attestable, integrity-protected environments with a minimalistic TCB. Mushroom depends on TEEs to provide integrity guarantees for data in use. It was initially developed for AMD SEV-SNP, but it recently gained support for running on Intel TDX as well. This talk will explore some of the required changes and discuss how the differences between AMD SEV-SNP and Intel TDX informed some of the design decisions.