BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//events.eurobsdcon.org//2026//talk//HSMCFS
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-2026-HSMCFS@events.eurobsdcon.org
DTSTART;TZID=CET:20260913T103000
DTEND;TZID=CET:20260913T111500
DESCRIPTION:AMD SEV encrypts a VM's memory with a per-VM key hidden from th
 e hypervisor\, but encryption is only useful if the guest owner can prove 
 what was actually launched. This talk presents a complete AMD SEV host sta
 ck for FreeBSD bhyve\, running today on AMD EPYC hardware\, with pre-attes
 tation.\n\nI will follow one encrypted Ubuntu 25.04 guest through the stac
 k\, and a new asp(4) driver for AMD Secure Processor\, vmm/SVM changes for
  SEV ASIDs\, bhyve userspace and a FreeBSD port of sevctl for measurement 
 verification and launch secret injection\, and a clean BhyveSevX64 OVMF pl
 atform.\n\nThe result boots attested SEV guests with SMP\, tested with 8 v
 CPUs\, and working virtio-net 1.0 on Ubuntu 25.04.
DTSTAMP:20260715T132342Z
LOCATION:D.0.07
SUMMARY:Confidential VMs on FreeBSD: A Complete AMD SEV Host Stack for bhyv
 e\, with Attestation - Zhen-Rong Wu
URL:https://events.eurobsdcon.org/2026/talk/HSMCFS/
END:VEVENT
END:VCALENDAR