Confidential computing techniques for data clean rooms

An apparatus, comprising:

• one or more memories storing code;
• and
• one or more processors coupled with the one or more memories and individually or collectively operable to execute the code to cause the apparatus to:
• receive, by a data clean room orchestration system, an indication of mutually attested code for a data clean room between two or more partners;
• configure, by the data clean room orchestration system, a trusted execution environment for the data clean room between the two or more partners, the trusted execution environment comprising one or more virtual machines (VMs) that are individually or collectively operable to execute the mutually attested code;
• obtain, by the one or more VMs in the trusted execution environment configured by the data clean room orchestration system, two or more partner datasets encrypted with respective secret keys of the two or more partners;
• transmit, to endpoints associated with the two or more partners, an attestation report comprising at least an encrypted token and a host public key of a host machine associated with the one or more VMs;
• receive, by the one or more VMs, the respective secret keys wrapped with the host public key of the host machine;
• and
• execute the mutually attested code on the two or more partner datasets in the trusted execution environment based at least in part on using a host private key of the host machine to unwrap the respective secret keys.

A non-transitory computer-readable medium storing code that comprises instructions executable by one or more processors to:

• receive, by a data clean room orchestration system, an indication of mutually attested code for a data clean room between two or more partners;
• configure, by the data clean room orchestration system, a trusted execution environment for the data clean room between the two or more partners, the trusted execution environment comprising one or more virtual machines (VMs) that are individually or collectively operable to execute the mutually attested code;
• obtain, by the one or more VMs in the trusted execution environment configured by the data clean room orchestration system, two or more partner datasets encrypted with respective secret keys of the two or more partners;
• transmit, to endpoints associated with the two or more partners, an attestation report comprising at least an encrypted token and a host public key of a host machine associated with the one or more VMs;
• receive, by the one or more VMs, the respective secret keys wrapped with the host public key of the host machine;
• and
• execute the mutually attested code on the two or more partner datasets in the trusted execution environment based at least in part on using a host private key of the host machine to unwrap the respective secret keys.