Technologies for secure authentication and programming of accelerator devices

A method comprising:

• receiving, by a first trusted execution environment of a computing device, a unique device identifier from an accelerator device of the computing device;
• validating, by the first trusted execution environment, a device certificate for the unique device identifier in response to receiving the unique device identifier;
• authenticating, by the first trusted execution environment, the accelerator device in response to validating the device certificate, wherein authenticating the accelerator device comprises receiving attestation information indicative of a device configuration of the accelerator device;
• validating, by the first trusted execution environment, the attestation information based on the device certificate;
• establishing, by the first trusted execution environment, a secure channel with the accelerator device in response to validating the attestation information;
• authenticating a tenant enclave comprising a second trusted execution environment hosted by a processor of the computing device, wherein the tenant enclave is hosted by the processor and comprises a tenant application;
• in response to authentication of the tenant enclave, receiving a bitstream image key and a data key from the tenant enclave;
• securely communicating, via the secure channel, encrypted versions of the bitstream image key and of the data key to the accelerator device;
• and
• programming the accelerator device via the secure channel using the bitstream image key;
• wherein code and data comprised in the first trusted execution environment is protected by hardware protection circuitry of a processor of the computing device while being executed or while being stored in a protected cache memory of the processor.

One or more non-transitory computer-readable storage media comprising a plurality of instructions stored thereon that, in response to being executed, cause a computing device to:

• receive, by a first trusted execution environment of the computing device, a unique device identifier from an accelerator device of the computing device;
• validate, by the first trusted execution environment, a device certificate for the unique device identifier in response to receiving the unique device identifier;
• authenticate, by the first trusted execution environment, the accelerator device in response to validating the device certificate, wherein authenticating the accelerator device comprises receiving attestation information indicative of a device configuration of the accelerator device;
• validate, by the first trusted execution environment, the attestation information based on the device certificate;
• establish, by the first trusted execution environment, a secure channel with the accelerator device in response to validating the attestation information;
• authenticate a tenant enclave comprising a second trusted execution environment hosted by a processor of the computing device, wherein the tenant enclave is hosted by the processor and comprises a tenant application;
• in response to authentication of the tenant enclave, receive a bitstream image key and a data key from the tenant enclave;
• securely communicate, via the secure channel, encrypted versions of the bitstream image key and of the data key to the accelerator device;
• and
• program the accelerator device via the secure channel using the bitstream image key;
• wherein code and data comprised in the first trusted execution environment is protected by hardware protection circuitry of a processor of the computing device while being executed or while being stored in a protected cache memory of the processor.