{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T16:56:32Z","timestamp":1782924992229,"version":"3.54.5"},"reference-count":130,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,5,25]],"date-time":"2026-05-25T00:00:00Z","timestamp":1779667200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,25]],"date-time":"2026-05-25T00:00:00Z","timestamp":1779667200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,5,25]]},"DOI":"10.1109\/ipdps65963.2026.00075","type":"proceedings-article","created":{"date-parts":[[2026,6,30]],"date-time":"2026-06-30T20:55:16Z","timestamp":1782852916000},"page":"850-867","source":"Crossref","is-referenced-by-count":0,"title":["SecPerf: Demystifying Cost of Confidential HPC"],"prefix":"10.1109","author":[{"given":"Marcin","family":"Chrapek","sequence":"first","affiliation":[{"name":"ETH Zurich,Department of Computer Science,Zurich,Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Siyuan","family":"Shen","sequence":"additional","affiliation":[{"name":"ETH Zurich,Department of Computer Science,Zurich,Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Patrick","family":"Iff","sequence":"additional","affiliation":[{"name":"ETH Zurich,Department of Computer Science,Zurich,Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tiancheng","family":"Chen","sequence":"additional","affiliation":[{"name":"ETH Zurich,Department of Computer Science,Zurich,Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mikhail","family":"Khalilov","sequence":"additional","affiliation":[{"name":"ETH Zurich,Department of Computer Science,Zurich,Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Marcin","family":"Copik","sequence":"additional","affiliation":[{"name":"ETH Zurich,Department of Computer Science,Zurich,Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Maciej","family":"Besta","sequence":"additional","affiliation":[{"name":"ETH Zurich,Department of Computer Science,Zurich,Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Torsten","family":"Hoefler","sequence":"additional","affiliation":[{"name":"ETH Zurich,Department of Computer Science,Zurich,Switzerland"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.3390\/healthcare11060887"},{"key":"ref2","article-title":"BloombergGPT: A Large Language Model for Finance","author":"Wu","year":"2023"},{"key":"ref3","article-title":"ChatLaw: Open-Source Legal Large Language Model with Integrated External Knowledge Bases","author":"Cui","year":"2023"},{"key":"ref4","article-title":"Large Language Models Are State-of-the-Art Evaluators of Translation Quality","author":"Kocmi","year":"2023"},{"key":"ref5","article-title":"The Cost of Training NLP Models: A Concise Overview","author":"Sharir","year":"2020"},{"key":"ref6","article-title":"European Union Data Privacy Law Reform: General Data Protection Regulation, Privacy Shield, and the Right to Delisting","author":"Voss","year":"2017"},{"issue":"1","key":"ref7","first-page":"1637","article-title":"California Consumer Privacy Act: What Companies Need to Know","volume":"75","author":"Illman","year":"2019","journal-title":"The Business Lawyer"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1257\/aer.102.3.349"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/3581784.3607099"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SEED51797.2021.00025"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3623461"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/3623393.3623391"},{"key":"ref13","article-title":"TEE device interface security protocol (TDISP)","year":"2022"},{"key":"ref14","article-title":"Integrity and data encryption (IDE) ECN","year":"2020"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/MM.2020.2974843"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3464298.3476133"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/3652597"},{"key":"ref18","article-title":"Intel SGX Explained","author":"Costan","year":"2016"},{"key":"ref19","article-title":"AMD SEV-SNP: Strengthening VM Isolation with Integrity Protection and More","author":"Kaplan","year":"2020","journal-title":"White paper"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/3423211.3425677"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/3555041.3589726"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/3322205.3311076"},{"key":"ref23","first-page":"133","article-title":"On the Performance of ARM Trust-Zone: (Practical Experience Report)","volume-title":"Distributed Applications and Interoperable Systems: 19th IFIP WG 6.1 International Conference, DAIS 2019, Held as Part of the 14th International Federated Conference on Distributed Computing Techniques, DisCoTec 2019, Kongens Lyngby, Denmark, June 17\u201321, 2019, Proceedings","author":"Amacher"},{"key":"ref24","first-page":"501","article-title":"Confidential Computing within an AI Accelerator","volume-title":"2023 USENIX Annual Technical Conference (USENIX ATC 23)","author":"Vaswani"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/IPDPS49936.2021.00115"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3700418"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SRDS.2018.00024"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3112202"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1016\/j.iot.2019.100055"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3214292.3214301"},{"key":"ref31","article-title":"Evaluating the Performance of the DeepSeek Model in Confidential Computing Environment","author":"Dong","year":"2025"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/CLOUD62652.2024.00028"},{"key":"ref33","article-title":"Confidential Computing on NVIDIA Hopper GPUs: A Performance Benchmark Study","author":"Zhu","year":"2024"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCSW63273.2025.00046"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/ISPASS64960.2025.00020"},{"key":"ref36","first-page":"84","article-title":"Confidential LLM Inference: Performance and Cost Across CPU and GPU TEEs","volume-title":"2025 IEEE International Symposium on Workload Characterization (IISWC).","author":"Chrapek"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/ISPA63168.2024.00192"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2025.104457"},{"key":"ref39","article-title":"SoK: Hardware-supported Trusted Execution Environments","author":"Schneider","year":"2022"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103180"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/MSEC.2019.2947124"},{"key":"ref42","article-title":"A Survey of Secure Computation Using Trusted Execution Environments","author":"Li","year":"2023"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/Trustcom.2015.357"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.17487\/RFC9334"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-16815-4_20"},{"key":"ref46","article-title":"Intel SGX data center attestation primitives (intel SGX DCAP): Orientation guide"},{"key":"ref47","article-title":"Versioned chip endorsement key (VCEK) certificate and KDS interface specification","year":"2025"},{"key":"ref48","article-title":"NVIDIA device attestation and CoRIM-based reference measurement sharing v2.0","year":"2025"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/SEED61283.2024.00021"},{"key":"ref50","article-title":"Confidential Machine Learning within Graphcore IPUs","author":"Vaswani","year":"2022"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/3342195.3387532"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.10"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134095"},{"key":"ref54","article-title":"Slalom: Fast, Verifiable and Private Execution of Neural Networks in Trusted Hardware","author":"Tram\u00e8r","year":"2019"},{"key":"ref55","first-page":"817","article-title":"Telekine: secure computing with cloud gpus","volume-title":"Proceedings of the 17th Usenix Conference on Networked Systems Design and Implementation","author":"Hunt"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2021.3103382"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1145\/3600160.3600169"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354216"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/3586040"},{"key":"ref60","article-title":"Intel key locker specification","volume-title":"Tech. Rep. 343965-001US","year":"2020"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1038\/s41928-020-0372-5"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1145\/3712285.3759828"},{"key":"ref63","article-title":"Supporting intel\u00ae SGX on multi-socket platforms","volume-title":"Tech. Rep. 843058","author":"Johnson","year":"2024"},{"key":"ref64","article-title":"5th gen AMD EPYC\u2122 processor architecture","volume-title":"Tech. Rep.","year":"2025"},{"key":"ref65","article-title":"Software enabling for intel\u00ae TDX in support of TEE-i\/O","volume-title":"Tech. Rep.","year":"2022"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1145\/3623392"},{"key":"ref67","article-title":"A cryptographic evaluation of IPsec","author":"Ferguson","year":"1999"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23160"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1145\/3124680.3124732"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00088"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1145\/3384613.3384648"},{"key":"ref72","article-title":"Intel SHA extensions: New instructions supporting the secure hash algorithm on intel architecture processors","author":"Gulley","year":"2013","journal-title":"White Paper"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-40921-0_5"},{"key":"ref74","article-title":"NVIDIA BlueField-3 networking platform Datasheet","year":"2023"},{"key":"ref75","first-page":"1803","article-title":"The Unpatchable Silicon: A Full Break of the Bitstream Encryption of Xilinx 7-Series {FPGAs}","volume-title":"29th USENIX Security Symposium (USENIX Security 20)","author":"Ender"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1145\/2629462"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1109\/IPCCC51483.2021.9679399"},{"key":"ref78","article-title":"snvme-of: Secure and efficient disaggregated storage","author":"Chrapek","year":"2025"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1145\/3214303"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.14778\/3389133.3389144"},{"key":"ref81","first-page":"835","article-title":"{TimeCrypt}: Encrypted Data Stream Processing at Scale with Cryptographic Access Control","volume-title":"17th USENIX Symposium on Networked Systems Design and Implementation (NSDI 20)","author":"Burkhalter"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.6028\/nist.sp.800-53r5"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.SP.800-12r1"},{"key":"ref84","first-page":"973","article-title":"Meltdown: Reading Kernel Memory from User Space","volume-title":"27th USENIX Security Symposium (USENIX Security 18)","author":"Lipp"},{"key":"ref85","doi-asserted-by":"crossref","DOI":"10.1145\/1506409.1506429","article-title":"Lest We Remember: Cold Boot Attacks on Encryption Keys","volume-title":"17th USENIX Security Symposium (USENIX Security 08)","author":"Halderman"},{"key":"ref86","first-page":"991","article-title":"Foreshadow: Extracting the Keys to the Intel {SGX} Kingdom with Transient {Out-of-Order} Execution","volume-title":"27th USENIX Security Symposium (USENIX Security 18)","author":"Bulck"},{"key":"ref87","doi-asserted-by":"publisher","DOI":"10.1145\/381677.381695"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.1145\/2678373.2665726"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1145\/3193111.3193112"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.6028\/nist.sp.800-175br1"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134027"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-61042-1_43"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1109\/sp61157.2025.00104"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.1109\/ISORC.2010.10"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40041-4_24"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1109\/MSECP.2003.1193216"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3174679"},{"issue":"2","key":"ref98","first-page":"24","article-title":"Curiously recurring template patterns","volume":"7","author":"Coplien","year":"1995","journal-title":"C++ Rep."},{"key":"ref99","year":"2025","journal-title":"DOCA Documentation v2.10.0"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1145\/3620665.3640424"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1145\/2807591.2807644"},{"key":"ref102","first-page":"645","article-title":"{Graphene-SGX}: A Practical Library {OS} for Unmodified Applications on {SGX}","volume-title":"2017 USENIX Annual Technical Conference (USENIX ATC 17)","author":"Tsai"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-38980-1_8"},{"key":"ref104","article-title":"Blake3: One function, fast everywhere","author":"O\u2019Connor","year":"2021"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-43414-7_10"},{"key":"ref106","article-title":"Final portfolio of the CAESAR competition","year":"2019"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1109\/HOTI.2015.13"},{"key":"ref108","article-title":"MVAPICH :: Benchmarks"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.2172\/1090032"},{"issue":"45-74","key":"ref110","first-page":"22","article-title":"Introducing the graph 500","volume":"19","author":"Murphy","year":"2010","journal-title":"Cray Users Group (CUG)"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1109\/SC41404.2022.00016"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1145\/2503210.2503286"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1145\/2600212.2600224"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1145\/3295500.3356189"},{"key":"ref115","doi-asserted-by":"publisher","DOI":"10.1109\/SC41404.2022.00015"},{"key":"ref116","article-title":"Spcl\/DNN-cpp-proxies: C++\/MPI proxies for distributed training of deep neural networks"},{"key":"ref117","article-title":"Intel\u00ae memory latency checker v3.12","author":"Viswanathan","year":"2025"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.1086\/260062"},{"key":"ref119","first-page":"252","article-title":"Gromacs - a parallel computer for molecular-dynamics simulations","volume-title":"Physics Computing \u201992","author":"Bekker","year":"1993"},{"key":"ref120","doi-asserted-by":"publisher","DOI":"10.2172\/1113870"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.1177\/10943420251382476"},{"key":"ref122","article-title":"SGEMM\/DGEMM benchmark (direct-download archive)"},{"key":"ref123","doi-asserted-by":"publisher","DOI":"10.1177\/109434209100500406"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.1109\/CCGrid.2012.123"},{"key":"ref125","doi-asserted-by":"publisher","DOI":"10.1145\/170036.170042"},{"key":"ref126","first-page":"1254","article-title":"NAS parallel benchmarks","volume-title":"Encyclopedia of Parallel Computing","author":"Bailey","year":"2011"},{"key":"ref127","doi-asserted-by":"publisher","DOI":"10.1145\/3185768.3185771"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1145\/3295500.3356173"},{"key":"ref129","article-title":"Nvbandwidth","year":"2022"},{"key":"ref130","article-title":"TorchBench: A collection of open source benchmarks for PyTorch performance and usability evaluation","author":"Constable","year":"2020"}],"event":{"name":"2026 IEEE International Parallel and Distributed Processing Symposium (IPDPS)","location":"New Orleans, LA, USA","start":{"date-parts":[[2026,5,25]]},"end":{"date-parts":[[2026,5,29]]}},"container-title":["2026 IEEE International Parallel and Distributed Processing Symposium (IPDPS)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11575315\/11575316\/11575406.pdf?arnumber=11575406","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T16:29:31Z","timestamp":1782923371000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11575406\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,25]]},"references-count":130,"URL":"https:\/\/doi.org\/10.1109\/ipdps65963.2026.00075","relation":{},"subject":[],"published":{"date-parts":[[2026,5,25]]}}}