Secure memory systems

A method for securing a memory system comprising a plurality of memory modules, each memory module of the plurality of memory modules comprising a solid-state non-volatile memory and a volatile memory, the method comprising:

• retrieving different mask shares of a mask value from respective solid-state non-volatile memories of at least two memory modules of the plurality of memory modules, wherein the mask value comprises at least two mask shares distributed among the plurality of memory modules;
• computing the mask value for a given memory module of the plurality of memory modules using the retrieved different mask shares of the mask value, wherein the given memory module is different from the at least two memory modules;
• computing a root key for the given memory module based on the computed mask value and a masked root key, wherein the masked root key is produced by combining the root key and the mask value;
• computing a working key for the given memory module based on the computed root key;
• storing the computed working key for the given memory module in the volatile memory of the given memory module, the computed working key for encrypting primary data, and decrypting the encrypted primary data;
• loading the primary data;
• and
• storing the encrypted primary data, in the solid-state non-volatile memory of the given memory module.