Cryptographic system memory management

A system for managing encrypted data comprising:

• a processor to:
• store an encrypted first block correction value based on data stored in system memory in response to a write operation to the system memory;
• detect a read operation corresponding to the data stored in the system memory;
• calculate a second block correction value based on the data stored in the system memory, the second block correction value calculated based on an XOR operation comprising plaintext data stored in the system memory;
• determine that the second block correction value does not match a decrypted first block correction value;
• determine that a stored first MAC value does not match a calculated second MAC;
• recalculate the second block correction value with a correction operation, wherein the correction operation comprises an XOR operation based on decrypted data stored in the system memory and a replacement value for a device of the system memory;
• decrypt the data stored in the system memory in response to detecting the recalculated second MAC value matches the first block correction value;
• transmit the decrypted data to a cache device;
• decrypt a block of the data stored in the system memory, wherein a size of the block corresponds to a size of a block cipher's input or output;
• determine that entropy of plaintext in the decrypted block of the data is above a threshold level;
• and
• perform the correction operation on each device in the system memory storing a portion of the block of the data.

A method for managing encrypted memory comprising:

• storing a first message authentication code (MAC) based on data being stored in system memory in response to a write operation to the system memory;
• detecting a read operation corresponding to the data stored in the system memory;
• calculating a second MAC based on the data retrieved from the system memory;
• determining that the second MAC does not match the first MAC;
• recalculating the second MAC subsequent to a correction operation, wherein the correction operation comprises an XOR operation based on the data retrieved from the system memory and a replacement value for a device of the system memory;
• decrypting the data stored in the system memory in response to detecting the recalculated second MAC matches the first MAC;
• transmitting the decrypted data to cache;
• decrypting a block of the data stored in the system memory, wherein a size of the block corresponds to a size of a block cipher's input or output;
• determining that entropy of plaintext in the decrypted block of the data is above a threshold level;
• and
• performing the correction operation on each device in the system memory storing a portion of the block of the data.

A non-transitory computer readable media for managing encrypted memory comprising a plurality of instructions that, in response to execution by a processor, cause the processor to:

• store a first message authentication code (MAC) based on data being stored in system memory in response to a write operation to the system memory;
• detect a read operation corresponding to the data stored in the system memory;
• calculate a second MAC based on the data retrieved from the system memory;
• determine that the second MAC does not match the first MAC;
• recalculate the second MAC subsequent to a correction operation, wherein the correction operation comprises an XOR operation based on the data retrieved from the system memory and a replacement value for a device of the system memory;
• decrypt the data stored in the system memory in response to detecting the recalculated second MAC matches the first MAC;
• transmit the decrypted data to cache;
• decrypt a block of the data stored in the system memory, wherein a size of the block corresponds to a size of a block cipher's input or output;
• determine that entropy of plaintext in the decrypted block of the data is above a threshold level;
• and
• perform the correction operation on each device in the system memory storing a portion of the block of the data.