AMD SEV

AMD SEV isolates virtual machines by encrypting memory with up to 509 unique keys managed by a dedicated on-die security processor.

AMD Secure Encrypted Virtualization (SEV) hardware-encrypts virtual machine memory using the AES-128 engine integrated into EPYC processor memory controllers. The dedicated AMD Secure Processor (ASP) handles key management: this shields guest data from compromised hypervisors or malicious admins. Advanced iterations like SEV-SNP (Secure Nested Paging) introduce strong memory integrity protections to block remapping attacks. This technology powers confidential computing instances across major providers like Azure and Google Cloud, ensuring data remains encrypted even during active processing.

https://www.amd.com/en/developer/sev.html