The GPU transparently copies and decrypts all inputs to its inside memory. From then onwards, every thing operates in plaintext In the GPU. This encrypted communication amongst CVM and GPU seems to generally be the key https://montyikbv442964.dsiblogger.com/63299068/confidential-clearance-license-things-to-know-before-you-buy