Securing results of privileged computing operations

A computer implemented method, comprising:

• under the control of one or more computer systems configured with executable instructions,
• generating a request to perform a privileged operation on a virtualization layer of a host computing device;
• obtaining a public key and including the public key in the request, the public key capable of being used to encrypt information, the public key having a corresponding private key that is capable of being used to decrypt the information encrypted using the public key;
• submitting the request including the public key to the virtualization layer of the host computing device, the virtualization layer configured to execute the privileged operation to produce a result;
• and
• wherein the virtualization layer is configured to encrypt the result of the privileged operation by using the public key provided with the request.

A system, comprising:

• a first computer system including at least one processor;
• and
• memory including instructions that, when executed by the at least one processor, cause the computing system to:
• receive, from a trusted party, a request to perform a privileged operation on a virtualization layer of a host computing device, the request including a public key, the public key capable of being used to encrypt information, the public key having a corresponding private key that is capable of being used to decrypt the information encrypted using the public key;
• and
• issue the request to an application programming interface (API) of the host computing device, wherein the virtualization layer is configured to execute the privileged operation to produce a result and encrypt the result using the public key provided with the request.

A computing system, comprising:

• at least one processor;
• and
• memory including instructions that, when executed by the at least one processor, cause the computing system to:
• receive a request to perform a privileged operation on a virtualization layer of a host computing device, the request including a public key, the public key capable of being used to encrypt information, the public key having a corresponding private key that is capable of being used to decrypt the information encrypted using the public key;
• execute the request in the virtualization layer of the host computing device to produce a result;
• and
• cause the result of the privileged operation to be encrypted by using the public key provided with the request.

A non-transitory computer readable storage medium storing one or more sequences of instructions executable by one or more processors to:

• receive a request to perform a privileged operation on a virtualization layer of a host computing device, the request including a public key, the public key capable of being used to encrypt information, the public key having a corresponding private key that is capable of being used to decrypt the information encrypted using the public key;
• execute the request in the virtualization layer of the host computing device to produce a result;
• and
• cause the result of the privileged operation to be encrypted by using the public key provided with the request.