System, Apparatus And Method For Integrity Protecting Tenant Workloads In A Multi-Tenant Computing Environment

At least one non-transitory computer readable storage medium having stored thereon instructions, which if performed by a machine cause the machine to perform a method comprising:

• receiving a request to load an encrypted application for execution in a protected domain of a cloud service provider;
• receiving the encrypted application and applying integrity protection information to the encrypted application;
• storing the encrypted application with the integrity protection information in a memory of the cloud service provider;
• generating a cryptographic response using a key to confirm that the encrypted application was stored with the integrity protection information;
• and
• sending the cryptographic response.

A method comprising:

• receiving a request to load an encrypted application for execution in a protected domain of a cloud service provider;
• receiving the encrypted application and applying integrity protection information to the encrypted application;
• storing the encrypted application with the integrity protection information in a memory of the cloud service provider;
• generating a cryptographic response using a key to confirm that the encrypted application was stored in the memory with the integrity protection information;
• and
• sending the cryptographic response.

A multi-tenant computing system comprising:

• at least one processor comprising:
• a plurality of cores on which a plurality of agents of a plurality of tenants of the multi-tenant computing system are to execute;
• and
• a memory execution circuit to receive an encrypted application of a first tenant of the plurality of tenants, apply integrity protection information to the encrypted application, store the encrypted application with the integrity protection information in a memory, generate a cryptographic response using a key to confirm that the encrypted application was stored in the memory with the integrity protection information, and send the cryptographic response;
• and
• the memory coupled to the at least one processor.