The GPU transparently copies and decrypts all inputs to its inner memory. From then onwards, every thing runs in plaintext Within the GPU. This encrypted communication in between CVM and GPU seems being the key source https://ai-studio-seven.vercel.app