The GPU transparently copies and decrypts all inputs to its inside memory. From then onwards, every thing operates in plaintext inside the GPU. This encrypted communication among CVM and GPU appears to be the principle https://honeypotz.net