The GPU transparently copies and decrypts all inputs to its inner memory. From then onwards, everything runs in plaintext Within the GPU. This encrypted communication amongst CVM and GPU seems being the principle supply https://sashafcpo611891.answerblogs.com/30613191/confidential-access-things-to-know-before-you-buy