Confidential Computing on NVIDIA Hopper GPUs: A Performance Benchmark Study
Not on the map. Why?
Abstract (arXiv)
This report evaluates the performance impact of enabling Trusted Execution Environments (TEE) on NVIDIA Hopper GPUs for large language model (LLM) inference tasks. We benchmark the overhead introduced by TEE mode across various LLMs and token lengths, with a particular focus on the bottleneck caused by CPU-GPU data transfers via PCIe. Our results indicate that while there is minimal computational overhead within the GPU, the overall performance penalty is primarily attributable to data transfer. For the majority of typical LLM queries, the overhead remains below 7%, with larger models and longer sequences experiencing nearly zero overhead.
Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). Builds on 2 of its 16 references that are in the map. First posted on arXiv 6 Sep 2024.
Builds on
2 of 16 references.
References · 2
Built on by
Citing papers per year: 2024: 1; 2025: 0; 2026: 6.
7 papers.
- 2024CoreGuard: Safeguarding Foundational Capabilities of LLMs Against Model Stealing in Edge Deploymentcited by 5
- 2026MemTrust: A Zero-Trust Architecture for Unified AI Memory Systemcited by 3
- 2026Committed SAE-Feature Traces for Audited-Session Substitution Detection in Hosted LLMscited by 0
- 2026The Serialized Bridge: Understanding and Recovering LLM Serving Performance under Blackwell GPU Confidential Computingcited by 0
- 2026Benchmarking Confidential GPU Inference on NVIDIA H100 under Intel TDXcited by 0
- 2026Privacy Failure in Split-LLM Training, The Returned Gradient Nullifies the Decoyscited by 0
- 2026SoK: Decentralized Agent Economic Infrastructurecited by 0
- 2026SoK: Decentralized Agent Economic Infrastructure1 Oct 2026
- 2026Privacy Failure in Split-LLM Training, The Returned Gradient Nullifies the Decoys3 Sep 2026
- 2026The Serialized Bridge: Understanding and Recovering LLM Serving Performance under Blackwell GPU Confidential Computing22 Jun 2026
- 2026Benchmarking Confidential GPU Inference on NVIDIA H100 under Intel TDX20 May 2026
- 2026Committed SAE-Feature Traces for Audited-Session Substitution Detection in Hosted LLMs20 Apr 2026
- 2026MemTrust: A Zero-Trust Architecture for Unified AI Memory System11 Jan 2026
- 2024CoreGuard: Safeguarding Foundational Capabilities of LLMs Against Model Stealing in Edge Deployment16 Oct 2024