The GPU transparently copies and decrypts all inputs to its internal memory. From then onwards, everything runs in plaintext inside the GPU. This encrypted communication in between CVM and GPU seems to be the key supply https://noransomattack.com