The GPU transparently copies and decrypts all inputs to its internal memory. From then onwards, anything runs in plaintext Within the GPU. This encrypted communication amongst CVM and GPU appears to be the main source https://no-ransom-6dmd.vercel.app