Comment on Fabricked: Misconfiguring Infinity Fabric to Break AMD SEV-SNPComments−procone3moRequires an already compromised hypervisor / UEFI. Yawn.−Borealid3moThe only purpose of SEV is to protect a guest against the person who controls the hypervisor.So this is a threat against SEV.−crest3moThat's exactly what SEV is supposed to protect against. If you trust the hypervisor you don't have to encrypt your virtual machine's main memory.
Comments
Requires an already compromised hypervisor / UEFI. Yawn.
The only purpose of SEV is to protect a guest against the person who controls the hypervisor.
So this is a threat against SEV.
That's exactly what SEV is supposed to protect against. If you trust the hypervisor you don't have to encrypt your virtual machine's main memory.