of GPU HBM placed inside the Compute Protected Region (CPR), which protects it by access control, not encryption
~90%observed
| Value kind | observed — Reported measurements, counts, and specifications keep the precision and scope stated by their source; an exact specification is not treated as a range. |
|---|---|
| Scope | The ~90% figure comes from the Hopper configuration studied in arXiv 2507.02770. In GPU confidential-computing mode, HBM contents are protected by hardware access control, not by encryption at rest: code and data sit in plaintext in HBM inside the GPU package. Encryption covers CPU-GPU transfers and, on Blackwell, NVLink. No NVIDIA primary source says Blackwell encrypts HBM. Do not read ~90% as an encrypted-capacity specification. |
| As of | 2025 |
| Source | arXiv 2507.02770 (GPU CC Demystified); NVIDIA WP-12554 |
| Review | checking…review by 2026-11-23 · standard cadence |
| Recorded changes | last 2026-06-29 |
| Claim id | of-gpu-hbm-placed-inside-the-encrypted |
Where the guide uses it
← Full numbers register — every date-stamped figure in the guide, with revision history.