To facilitate protected information transfer, the NVIDIA driver, running in the CPU TEE, makes use of an encrypted "bounce buffer" located in shared system memory. This buffer acts as an middleman, making certain all interaction among the CPU and GPU, like command buffers and CUDA kernels, is encrypted and so mitigating potential in-band attacks.