On Mon, Mar 09, 2026 at 09:39:44AM -0600, Peter Gonda wrote:
> Great feature to have thanks Jiri! A couple naive questions.
>
> On Thu, Mar 5, 2026 at 5:38 AM Jiri Pirko <jiri(a)resnulli.us> wrote:
> >
> > From: Jiri Pirko <jiri(a)nvidia.com>
> >
> > Add a new "system_cc_decrypted" dma-buf heap to allow userspace to
> > allocate decrypted (shared) memory for confidential computing (CoCo)
> > VMs.
> >
> > On CoCo VMs, guest memory is encrypted by default. The hardware uses an
> > encryption bit in page table entries (C-bit on AMD SEV, "shared" bit on
> > Intel TDX) to control whether a given memory access is encrypted or
> > decrypted. The kernel's direct map is set up with encryption enabled,
> > so pages returned by alloc_pages() are encrypted in the direct map
> > by default. To make this memory usable for devices that do not support
> > DMA to encrypted memory (no TDISP support), it has to be explicitly
> > decrypted. A couple of things are needed to properly handle
> > decrypted memory for the dma-buf use case:
> >
> > - set_memory_decrypted() on the direct map after allocation:
> > Besides clearing the encryption bit in the direct map PTEs, this
> > also notifies the hypervisor about the page state change. On free,
> > the inverse set_memory_encrypted() must be called before returning
> > pages to the allocator. If re-encryption fails, pages
> > are intentionally leaked to prevent decrypted memory from being
> > reused as private.
> >
> > - pgprot_decrypted() for userspace and kernel virtual mappings:
> > Any new mapping of the decrypted pages, be it to userspace via
> > mmap or to kernel vmalloc space via vmap, creates PTEs independent
> > of the direct map. These must also have the encryption bit cleared,
> > otherwise accesses through them would see encrypted (garbage) data.
>
> So this only works on new mappings? What if there are existing
> mappings to the memory that will be converted to shared?
The set_memory_decrypted() is called during system_heap_allocate(), it
is not possible to change dynamically between encrypted/decrypted.
Once the heap is created every PTE is always created with the correct
pgprot.
Jason
On Mon, Mar 09, 2026 at 01:56:10PM +0100, Petr Tesarik wrote:
> I don't want to start a bikeshedding discussion, so if everyone else
> likes this name, let's keep it. But maybe the "_CC" (meaning
> Confidential Comptuing) is not necessary. IIUC it's the same concept as
> set_page_encrypted(), set_page_decrypted(), which does not refer to
> CoCo either.
Frankly I hate that AMD got their "encrypted" "decrypted" naming baked
into the CC related APIs.
I'm not at all convinced that they "do not refer to CoCo" in the way
Linux uses them and other arches absolutely make them 100% tied to coco.
If we are going to bikeshed the name it should be DMA_ATTR_CC_SHARED
Jason
In the complex and often unpredictable world of cryptocurrency where security challenges and asset losses occur frequently Cryptera Chain Signals CCS has established itself as a trusted professional service provider dedicated to supporting individuals and organizations facing digital asset difficulties The company has developed a solid reputation through consistent focus on transparency technical precision and ethical standards in an industry where many operations face skepticism
Cryptera Chain Signals was established with the primary goal of offering specialized assistance in cryptocurrency recovery and blockchain forensics Drawing from extensive backgrounds in cybersecurity digital investigations and financial analysis the team applies proven methodologies to help clients address issues such as lost wallet access stolen funds and scam related losses The firm operates with a clear commitment to client education and realistic expectations ensuring that every case begins with a thorough assessment of possibilities rather than empty promises
What the company does centers on several core areas of expertise Cryptera Chain Signals provides advanced blockchain tracing services that allow for detailed mapping of transaction flows across public ledgers Using sophisticated clustering algorithms and analysis tools they follow the movement of funds even after they have passed through multiple addresses mixers or bridges This capability proves essential for victims of phishing attacks investment scams or unauthorized transfers as it generates actionable reports that can support interactions with law enforcement agencies and regulated exchanges
In addition to tracing Cryptera Chain Signals offers technical support for wallet recovery scenarios These include cases involving forgotten seed phrases damaged hardware devices or corrupted software files The experts guide clients through secure restoration processes without ever requesting full private keys or sensitive credentials upfront Their approach incorporates non destructive data extraction techniques and emphasizes prevention strategies to help clients strengthen future security measures
The company also assists with scam recovery by preparing comprehensive documentation and evidence packages tailored for legal proceedings or platform interventions Cryptera Chain Signals maintains strict confidentiality protocols and avoids common industry pitfalls such as demanding large cryptocurrency payments in advance or guaranteeing impossible outcomes This disciplined method has contributed to their credibility among those who have conducted independent research into recovery services
Throughout their operations Cryptera Chain Signals CCS prioritizes collaboration with clients providing regular updates and clear explanations of technical concepts in accessible language The firm works on a case by case basis evaluating factors such as the type of blockchain involved the timing of the incident and the feasibility of intervention By focusing on evidence based strategies rather than hype they help clients make informed decisions about pursuing recovery options or focusing on prevention
Client testimonies provide valuable insight into the practical impact of Cryptera Chain Signals work One individual from the United Kingdom shared how the company assisted after a major hardware wallet failure I had tried multiple diy approaches without success but the team at Cryptera Chain Signals used forensic methods to extract and restore access safely Their patience and detailed guidance turned a potentially permanent loss into a successful recovery
Another client from Canada described their experience following a sophisticated investment scam After losing substantial funds the tracing service mapped the entire transaction path allowing coordination with an exchange for a partial asset freeze The professional reports and ongoing support made the entire process far less overwhelming and gave me a clear path forward when I felt completely lost
A third testimonial comes from an Australian business owner who faced a phishing attack that compromised company wallets Cryptera Chain Signals delivered a full forensic analysis within days which proved instrumental in filing reports with authorities Their realistic assessment helped us recover a meaningful portion of the assets and more importantly taught us critical lessons about security that we now apply across our operations
These accounts along with many others reflect recurring themes of technical competence honest communication and tangible support even in cases where complete recovery was not possible Clients frequently highlight the absence of pressure tactics and the emphasis on long term asset protection as distinguishing factors
The legitimacy of Cryptera Chain Signals is further reinforced by their professional online presence clear service structure and consistent adherence to ethical guidelines In a field where advance fee frauds and unrealistic claims remain prevalent the company stands out by maintaining transparent processes and focusing on education rather than sensational marketing Their track record of handling diverse cases with discretion and expertise has earned recognition from those seeking reliable assistance
In conclusion Cryptera Chain Signals CCS continues to demonstrate why it is regarded as a legitimate and professional option for cryptocurrency recovery and blockchain investigations By combining deep technical knowledge with a client first philosophy the company provides meaningful value in situations that often feel hopeless For anyone dealing with lost or stolen digital assets exploring their services may offer the clarity and guidance needed to move forward
For more information or to schedule a confidential consultation visit the official website at https://www.crypterachainsignals.com or send an email to info(a)crypterachainsignals.com