Method and system for encrypting data using a command

A data processing (DP) accelerator, comprising:

• an interface to establish a secure communication channel with a host device, and to receive a command and input data over the secure communication channel from the host device, the command requesting the DP accelerator to encrypt the input data or decrypt the input data;
• a security unit comprising a cryptographic hardware processor to
• encrypt or decrypt the input data according to the command, including, in response to the command requesting to encrypt the input data, generating one or more keys and encrypting the input data using a first of the one or more keys, and an accelerator channel manager, that interfaces the DP accelerator to the host device, to
• transmit the encrypted or decrypted input data to the host device over the secure communication channel, including transmitting a second of the one or more keys to the host device through the secure communication channel, in response to the command requesting to encrypt the input data, wherein the host device decrypts the encrypted input data using the second of the one or more keys and compares the resulting data to the input data to validate encryption of the input data by the security unit.

A non-transitory machine-readable medium having instructions stored therein, which when executed by a hardware processor, cause the processor to perform operations of a data processing (DP) accelerator, the operations comprising:

• establishing a secure communication channel between a host device and the DP accelerator;
• receiving, by the DP accelerator, over the secure communication channel, a command and input data from the host device, the command requesting the DP accelerator to encrypt the input data or decrypt the input data, and, in response to the command requesting to encrypt the input data, generating one or more keys and encrypting the input data using a first of the one or more keys;
• encrypting, or decrypting, by the DP accelerator, the input data according to the command;
• and
• transmitting the encrypted or decrypted input data to the host device over the secure communication channel, including transmitting a second of the one or more keys to the host device through the secure communication channel, in response to the command requesting to encrypt the input data, wherein the host device decrypts the encrypted input data using the second of the one or more keys and compares the resulting data to the input data to validate encryption of the input data.

A host device, comprising:

• a processor;
• and
• a memory coupled to the processor to store instructions, which when executed by the processor, cause the processor to perform operations of host device causing a data processing (DP) accelerator to perform an encryption or decryption operation, the operations comprising:
• establishing a secure communication channel with the DP accelerator over a peripheral component interconnect express (PCIe) bus;
• transmitting, to a DP accelerator device over the secure communication channel, a command and input data to either encrypt, or decrypt, the input data using one or more designated keys, wherein, in response to the DP accelerator device receiving the command requesting to encrypt the input data, the DP accelerator generates one or more keys, encrypts the input data using a first of the one of the one or more keys, and transmits the encrypted or decrypted data with a second of the one or more keys to the host device;
• receiving the encrypted or decrypted data from the DP accelerator and the second of the one or more keys over the secure communication channel;
• using the second of the one or more keys to decrypt the encrypted input data;
• and
• comparing the result to the input data to validate encryption of the input data by the DP accelerator.