The GPU transparently copies and decrypts all inputs to its inside memory. From then onwards, every thing runs in plaintext In the GPU. This encrypted communication amongst CVM and GPU appears to generally be the key https://brianeudp010191.tkzblog.com/30538060/not-known-details-about-a-confidentiality-agreement-sample