“In 3 case studies, we demonstrate an attack on RSA in the Intel IPP crypto library, recovering the entire private key, logging into an OpenSSH server without authentication, and escalating privileges to root via the sudo binary.”
AMD sells SEV as protection for your VM against a malicious hypervisor. CacheWarp uses the INVD instruction to roll guest cache lines back to stale values, and the hypervisor walks in. Three generations of EPYC are affected. The confidential computing pitch assumes the host is the enemy, and the host turns out to be holding the keys.