{
  "schema_version": "1.0.0",
  "rubric_version": "1.0",
  "license": "CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/)",
  "record": {
    "id": "O-0140",
    "slug": "nvidia",
    "title": "NVIDIA",
    "aliases": [],
    "status": "draft",
    "last_reviewed": "2026-09-23",
    "review_interval_days": 90,
    "steward": null,
    "provenance": {
      "drafted_by": "ai",
      "reviewed_by": []
    },
    "risk_flags": [],
    "flags": [
      "provider-reported"
    ],
    "kind": "company",
    "homepage": "https://www.nvidia.com/",
    "one_liner": "An accelerated-computing company whose Hopper and Blackwell data-centre GPUs offer a confidential-computing mode with hardware attestation.",
    "sources": [
      {
        "source": "S-1200",
        "supports": "confidential computing on Hopper and Blackwell GPUs; performance counters disabled in confidential-computing mode",
        "locator": "pp. 6-18"
      },
      {
        "source": "S-1201",
        "supports": "H100 confidential-computing launch: on-die root of trust, device identity key, SPDM attestation"
      },
      {
        "source": "S-1206",
        "supports": "NVIDIA GPUs in confidential-computing mode listed as supported hardware by Tinfoil"
      }
    ],
    "type": "organization",
    "url": "https://trustbutveri.fyi/organizations/nvidia/",
    "source_file": "content/organizations/nvidia.md",
    "flags_all": [
      "provider-reported",
      "ai-drafted"
    ],
    "body_markdown": "NVIDIA describes itself as having \"pioneered accelerated computing\". Its public material relevant to verification concerns confidential computing on its data-centre GPUs:\n\n- **Confidential-computing mode.** NVIDIA documents a confidential-computing mode for its Hopper and Blackwell data-centre GPUs, in which the GPU is paired with a CPU trusted execution environment and attests its identity and firmware [[S-1200]]; see [[M-0008]].\n- **H100 launch.** NVIDIA engineers describe the feature's launch on the H100, with an on-die root of trust, a fused device identity key and SPDM attestation [[S-1201]].\n- **Counters in confidential mode.** NVIDIA disables performance counters in full confidential-computing mode, stating that they could provide an avenue for side-channel attacks [[S-1200]]; see [[M-0010]].\n- **Use by others.** Tinfoil's documentation lists NVIDIA GPUs in confidential-computing mode as supported hardware for its enclaves [[S-1206]]; see [[I-0006]].",
    "body_text": "NVIDIA describes itself as having \"pioneered accelerated computing\". Its public material relevant to verification concerns confidential computing on its data-centre GPUs: - Confidential-computing mode. NVIDIA documents a confidential-computing mode for its Hopper and Blackwell data-centre GPUs, in which the GPU is paired with a CPU trusted execution environment and attests its identity and firmware [S-1200]; see TEE remote attestation for AI workloads. - H100 launch. NVIDIA engineers describe the feature's launch on the H100, with an on-die root of trust, a fused device identity key and SPDM attestation [S-1201]. - Counters in confidential mode. NVIDIA disables performance counters in full confidential-computing mode, stating that they could provide an avenue for side-channel attacks [S-1200]; see On-chip telemetry from timing, memory and performance counters. - Use by others. Tinfoil's documentation lists NVIDIA GPUs in confidential-computing mode as supported hardware for its enclaves [S-1206]; see Tinfoil model identity (Modelwrap).",
    "referenced_by": [
      {
        "id": "M-0018",
        "title": "Chip location verification",
        "url": "https://trustbutveri.fyi/mechanisms/chip-location-verification/"
      },
      {
        "id": "M-0008",
        "title": "TEE remote attestation for AI workloads",
        "url": "https://trustbutveri.fyi/mechanisms/tee-remote-attestation/"
      },
      {
        "id": "S-1201",
        "title": "Confidential Computing on NVIDIA H100 GPUs for Secure and Trustworthy AI",
        "url": "https://trustbutveri.fyi/sources/apsey-confidential-computing-h100-gpus/"
      },
      {
        "id": "S-1611",
        "title": "Boost GPU Memory Performance with No Code Changes Using NVIDIA CUDA MPS",
        "url": "https://trustbutveri.fyi/sources/nassernia-cuda-mps-gpu-memory-performance/"
      },
      {
        "id": "S-1413",
        "title": "Opt-In NVIDIA Software Enables Data Center Fleet Management",
        "url": "https://trustbutveri.fyi/sources/nvidia-opt-in-fleet-management-software/"
      },
      {
        "id": "S-1200",
        "title": "NVIDIA Secure AI with Blackwell and Hopper GPUs (White Paper)",
        "url": "https://trustbutveri.fyi/sources/nvidia-secure-ai-blackwell-hopper-whitepaper/"
      }
    ]
  }
}