How big a concern is this if the data is encrypted by the kernel or user space?

Veserv · on July 8, 2023

Encryption does not help in this case. They have complete remote control over the entire CPU so they can just run the decryption code directly.

Encryption only helps if the endpoints that can get access to the plaintext are not compromised.

ignoramous · on July 8, 2023

There are atleast 2 more exception levels with higher privileges than the Kernel on arm64.