Process-based multi-key total memory encryption

A per-process memory encryption system, including, in each core of a multi-core processor:

• at least one translation lookaside buffer (TLB) configured to map virtual memory addresses to physical addresses, wherein the TLB is configured to encode key identifiers for keys in one or more bits of either a virtual memory address or a physical address in the TLB;
• process state memory configured to store a first process key table for a first process that maps key identifiers to unique keys and a second process key table for a second process that maps the key identifiers to different unique keys;
• and
• active process key table memory configured to store an active key table corresponding to the first process key table when the first process is active and the second process key table when the second process is active;
• wherein in response to a request for data corresponding to a virtual memory address, the at least one TLB is configured to provide a key identifier encoded in the virtual memory address or physical address in the TLB for the data to the active process key table memory to cause the active process key table memory to return the unique key mapped to the key identifier.

A per-process memory encryption system, including, in each hardware thread of a core:

• at least one translation lookaside buffer (TLB) configured to map virtual memory addresses to physical addresses, wherein the TLB is configured to encode key identifiers for keys in one or more bits of either a virtual memory address or a physical address in the TLB;
• process state memory configured to store a first process key table for a first process that maps key identifiers to unique keys and a second process key table for a second process that maps the key identifiers to different unique keys;
• and
• active process key table memory configured to store an active key table corresponding to the first process key table when the first process is active and the second process key table when the second process is active;
• wherein in response to a request for data corresponding to a virtual memory address, the at least one TLB is configured to provide a key identifier encoded in the virtual memory address or physical address in the TLB for the data to the active process key table memory to cause the active process key table memory to return the unique key mapped to the key identifier.