Virtual machine page movement for encrypted memory
AssigneeRed Hat, Inc.
InventorsMichael Tsirkin, Henri Han van Riel
Life of this patent
Estimating the term…
Abstract
Systems and methods for moving encrypted storage blocks in a security enhanced manner. An example method may comprise: selecting, by a processing device, a storage block stored by a storage device, wherein the storage block comprises encrypted content and is associated with a computing process; causing the encrypted content of the storage block to be decrypted using a first cryptographic input that is location dependent and encrypted using a second cryptographic input that is location independent; and copying the storage block comprising the encrypted content from a first location within the storage device to a second location within the storage device.
Claims20
A method comprising:
- selecting, by a processing device, a storage block stored by a storage device, wherein the storage block comprises encrypted content and is associated with a computing process;
- causing the encrypted content of the storage block to be decrypted using a first cryptographic input that is location dependent and encrypted using a second cryptographic input that is location independent;
- and
- copying the encrypted content of the storage block from a first location within the storage device to a second location within the storage device.
A system comprising:
- a memory;
- a processing device operatively coupled to the memory, the processing device to:
- select a storage block stored by a storage device, wherein the storage block comprises encrypted content and is associated with a computing process;
- cause the encrypted content of the storage block to be decrypted using a first cryptographic input that is location dependent and encrypted using a second cryptographic input that is location independent;
- and
- copy the encrypted content of the storage block from a first location within the storage device to a second location within the storage device.
A non-transitory machine-readable storage medium storing instructions that cause a processing device to:
- select, by a hypervisor, a memory page stored by a storage device, wherein the memory page comprises encrypted content and is associated with a virtual machine;
- cause the encrypted content of the memory page to be decrypted using a first cryptographic input that is location dependent and encrypted using a second cryptographic input that is location independent;
- and
- copy, by the hypervisor, the memory page comprising the encrypted content from a first location within the storage device to a second location within the storage device.
Dependencies are inferred from the claim text.