Enabling stateless accelerator designs shared across mutually-distrustful tenants

A method comprising:

• establishing, by a fully-homomorphic encryption (FHE)-capable circuitry of an accelerator device, a secure session with a trusted environment executing on a host device communicably coupled to the accelerator device;
• generating, by the FHE-capable circuitry as part of establishing the secure session, per-tenant FHE keys for each tenant utilizing the FHE-capable circuitry, the per-tenant FHE keys utilized to encrypt tenant data provided to an FHE-capable compute kernel of the FHE-capable circuitry;
• processing, by the FHE-capable circuitry, tenant data that is in an FHE-encrypted format encrypted with a per-tenant FHE key of the per-tenant FHE keys;
• and
• storing, by the FHE-capable circuitry, the tenant data that is in the FHE-encrypted format encrypted with the per-tenant FHE key of the per-tenant FHE keys;
• wherein an orchestrator component that is communicably coupled to the FHE-capable circuitry facilitates establishing the secure session with the trusted environment on the host device.

A non-transitory machine readable storage medium comprising instructions that, when executed, cause at least one processor to at least:

• establish, by a fully-homomorphic encryption (FHE)-capable circuitry of an accelerator device comprising the at least one processor, a secure session with a trusted environment executing on a host device communicably coupled to the accelerator device;
• generate, by the FHE-capable circuitry as part of establishing the secure session, per-tenant FHE keys for each tenant utilizing the FHE-capable circuitry, the per-tenant FHE keys utilized to encrypt tenant data provided to an FHE-capable compute kernel of the FHE-capable circuitry;
• process, by the FHE-capable circuitry, tenant data that is in an FHE-encrypted format encrypted with a per-tenant FHE key of the per-tenant FHE keys;
• and
• store, by the FHE-capable circuitry, the tenant data that is in the FHE-encrypted format encrypted with the per-tenant FHE key of the per-tenant FHE keys;
• wherein an orchestrator component that is communicably coupled to the FHE-capable circuitry facilitates establishing the secure session with the trusted environment on the host device.