Secure virtualized cryptographic subsystems for autonomous systems and applications

A processor comprising:

• one or more processing units to perform operations comprising:
• receiving, from an application executing in a virtual machine (VM), a request to perform a cryptographic operation, wherein the request specifies an ephemeral key identifier and source data;
• determining, using key metadata received from a trusted execution environment, a key slot identifier associated with the ephemeral key identifier, wherein the key slot identifier identifies a key slot in which a cryptographic key is stored;
• causing the cryptographic operation to be performed on the source data in the trusted execution environment using the cryptographic key, wherein the cryptographic key used to perform the cryptographic operation is accessed from the key slot identified by the key slot identifier;
• and
• providing, to the application, a cryptographic operation result received from the trusted execution environment.

A system, comprising:

• one or more processors to perform operations comprising:
• receiving, from an application executing in a virtual machine (VM), a request to perform a cryptographic operation, wherein the request specifies an ephemeral key identifier and source data;
• determining, using key metadata received from a trusted execution environment, a key slot identifier associated with the ephemeral key identifier, wherein the key slot identifier identifies a key slot in which a cryptographic key is stored;
• causing the cryptographic operation to be performed on the source data in the trusted execution environment using the cryptographic key, wherein the cryptographic key used to perform the cryptographic operation is accessed from the key slot identified by the key slot identifier;
• and
• providing, to the application, a cryptographic operation result received from the trusted execution environment.