Most of the key protections are used to encrypt key to protect it from malware or other tenants. What if the hypervisor "steals" my key?
If I am using a VM provided by a CSP, when I input a key to encrypt or decrypt my data, how do I know the CSP doesn't store my key and "might" snoop my data without my notice.
Do CSPs provide this kind of trust that they won't do this? Is there a method or technique that can do key penetration from guest OS directly to hard drive so that I know no one except me can see my key?