of GPU HBM placed inside the Compute Protected Region (CPR) — access-fenced on Hopper, hardware-encrypted on Blackwell
~90%observed
| Value kind | observed — Reported measurements, counts, and specifications keep the precision and scope stated by their source; an exact specification is not treated as a range. |
|---|---|
| Scope | The Hopper configuration studied in arXiv 2507.02770 enforces CPR by hardware access control without runtime HBM encryption; Blackwell adds hardware-accelerated HBM encryption. State memory encryption per platform, and do not treat ~90% as a universal encrypted-capacity specification. |
| As of | 2025 |
| Source | arXiv 2507.02770 (GPU CC Demystified); NVIDIA WP-12554 |
| Review | checking…review by 2026-11-23 · standard cadence |
| Recorded changes | last 2026-06-29 |
| Claim id | of-gpu-hbm-placed-inside-the-encrypted |
Where the guide uses it
← Full numbers register — every date-stamped figure in the guide, with revision history.