Implementations for selective cryptographic
processing of collective and
unicast traffic at a switch in an accelerator network. As AI training and
inference workloads increasingly rely on in-network collective operations to accelerate gradient synchronization, broadcast, and reduction across large-scale accelerator pods, some implementations include a switch comprising a circuit that determines, for each encrypted transaction, whether it is a collective transaction or a
unicast transaction. For collective transactions, the circuit decrypts
transaction data for
processing such as arithmetic reduction at the switch. For
unicast transactions, the circuit bypasses decryption and forwards the transaction with data remaining encrypted between source and destination accelerators. Some implementations further include selective trust elevation of the switch into a
trusted computing base for collective operations via a security manager, secure session establishment, attestation
verification, and
encryption key
programming, while maintaining the switch outside the
trusted computing base for unicast operations.