Writing

Whether RDRAND and RDSEED can be trusted as entropy sources inside Intel TDX and AMD SEV-SNP guests, revisiting the BSI 2016 assessment.

Securely injecting database secrets into CloudNativePG pods with AMD SEV-SNP remote attestation on AKS.

Notes on the Cramer–Shoup encryption scheme and how it reaches IND-CCA2 security under the DDH assumption.

Notes and a critical review of TEE.fail, which extracts attestation keys from confidential computing platforms by listening in on DDR5 memory.