Organization · Company
NVIDIA
An accelerated-computing company whose Hopper and Blackwell data-centre GPUs offer a confidential-computing mode with hardware attestation.
NVIDIA describes itself as having "pioneered accelerated computing". Its public material relevant to verification concerns confidential computing on its data-centre GPUs:
- Confidential-computing mode. NVIDIA documents a confidential-computing mode for its Hopper and Blackwell data-centre GPUs, in which the GPU is paired with a CPU trusted execution environment and attests its identity and firmware 1; see TEE remote attestation for AI workloads.
- H100 launch. NVIDIA engineers describe the feature's launch on the H100, with an on-die root of trust, a fused device identity key and SPDM attestation 2.
- Counters in confidential mode. NVIDIA disables performance counters in full confidential-computing mode, stating that they could provide an avenue for side-channel attacks 1; see On-chip telemetry from timing, memory and performance counters.
- Use by others. Tinfoil's documentation lists NVIDIA GPUs in confidential-computing mode as supported hardware for its enclaves 3; see Tinfoil model identity (Modelwrap).
Mechanisms
Mechanisms this organization has designed, built, evaluated or supplied.
- Trusted execution environments (TEEs) in CPUs and GPUs sign reports of loaded software, so a remote party can check which code ran an AI workload.
- Timing a chip's signed replies to trusted servers at known places, so that the speed of light bounds how far away the chip can be.
Publications
Sources this organization authored or published.
- BS. Nassernia (2025). Boost GPU Memory Performance with No Code Changes Using NVIDIA CUDA MPS. NVIDIA Technical Blog. RecordCited by Hardware-enabled guarantees (flexHEG) and guarantee processors
- BNVIDIA (2025). NVIDIA Secure AI with Blackwell and Hopper GPUs (White Paper). NVIDIA documentation. RecordCited by On-chip telemetry from timing, memory and performance counters; TEE remote attestation for AI workloads; Attestable Audits; NVIDIA
- BNVIDIA (2025). Opt-In NVIDIA Software Enables Data Center Fleet Management. NVIDIA Blog. RecordCited by Chip location verification; Chips are where they are declared to be
- CE. Apsey et al. (2023). Confidential Computing on NVIDIA H100 GPUs for Secure and Trustworthy AI. NVIDIA Technical Blog. RecordCited by TEE remote attestation for AI workloads; NVIDIA
Sources
- BNVIDIA (2025). NVIDIA Secure AI with Blackwell and Hopper GPUs (White Paper). NVIDIA documentation. Source recordSupports: confidential computing on Hopper and Blackwell GPUs; performance counters disabled in confidential-computing mode · pp. 6-18
- CE. Apsey et al. (2023). Confidential Computing on NVIDIA H100 GPUs for Secure and Trustworthy AI. NVIDIA Technical Blog. Source recordSupports: H100 confidential-computing launch: on-die root of trust, device identity key, SPDM attestation
- BTinfoil (2026). A primer on secure enclaves. Tinfoil documentation. Source recordSupports: NVIDIA GPUs in confidential-computing mode listed as supported hardware by Tinfoil