Technologies for memory replay prevention using compressive encryption

A method for memory isolation, the method comprising:

• receiving, by a computing device, a request to write a data line to a physical memory address, wherein the physical memory address comprises a key identifier;
• selecting, by the computing device, an encryption key from a key table based on the key identifier of the physical memory address;
• determining, by the computing device, whether the data line is compressible;
• compressing, by the computing device, the data line to generate a compressed line in response to determining that the data line is compressible, wherein the compressed line comprises compression metadata and compressed data;
• adding, by the computing device, encryption metadata to the compressed line, wherein the encryption metadata is indicative of the encryption key, and wherein the encryption metadata comprises the key identifier;
• adding, by the computing device, integrity metadata to the compressed line, wherein the integrity metadata comprises an integrity check value based on the compressed data;
• encrypting, by the computing device, a part of the compressed line with the encryption key to generate an encrypted line in response to adding the encryption metadata, wherein encrypting the part of the compressed line comprises encrypting the compression metadata, the integrity metadata, and the compressed data;
• and
• writing, by the computing device, the encrypted line to a memory device at the physical memory address.

One or more non-transitory, machine readable storage media comprising a plurality of instructions that in response to being executed cause a computing device to:

• receive a request to write a data line to a physical memory address, wherein the physical memory address comprises a key identifier;
• select an encryption key from a key table based on the key identifier of the physical memory address;
• determine whether the data line is compressible;
• compress the data line to generate a compressed line in response to determining that the data line is compressible, wherein the compressed line comprises compression metadata and compressed data;
• add encryption metadata to the compressed line, wherein the encryption metadata is indicative of the encryption key, and wherein the encryption metadata comprises the key identifier;
• add integrity metadata to the compressed line, wherein the integrity metadata comprises an integrity check value based on the compressed data;
• encrypt a part of the compressed line with the encryption key to generate an encrypted line in response to adding the encryption metadata, wherein to encrypt the part of the compressed line comprises to encrypt the compression metadata, the integrity metadata, and the compressed data;
• and
• write the encrypted line to a memory device at the physical memory address.