Container management for cryptanalysis attack protection
AssigneeRed Hat, Inc.
InventorsOrit Wasserman, Gabriel Zvi BenHanokh
Life of this patent
Estimating the term…
Abstract
Containers can be managed for cryptanalysis attack protection. For example, a computing system can receive, from a container, a description specifying a first hardware requirement for the container. The computing system can restrict access to hardware based on the first hardware requirement for the container. The computing system can perform, for a data object requested by the container, an encryption operation and a decryption operation using the hardware. A result of the encryption operation can be inaccessible to the container prior to the decryption operation.
Claims20
A system comprising:
- a processor;
- and
- a memory including instructions that are executable by the processor for causing the processor to:
- receive, from a container, a description specifying a first hardware requirement for the container;
- restrict access to hardware based on the first hardware requirement for the container;
- and
- perform, for a data object requested by the container, an encryption operation and a decryption operation using the hardware, wherein a result of the encryption operation is inaccessible to the container prior to the decryption operation.
A computer-implemented method comprising:
- receiving, from a container, a description specifying a first hardware requirement for the container;
- restricting access to hardware based on the first hardware requirement for the container;
- and
- performing, for a data object requested by the container, an encryption operation and a decryption operation using the hardware, wherein a result of the encryption operation is inaccessible to the container prior to the decryption operation.
A non-transitory computer-readable medium comprising program code that is executable by a processor for causing the processor to:
- receive, from a container, a description specifying a first hardware requirement for the container;
- restrict access to hardware based on the first hardware requirement for the container;
- and
- perform, for a data object requested by the container, an encryption operation and a decryption operation using the hardware, wherein a result of the encryption operation is inaccessible to the container prior to the decryption operation.
Dependencies are inferred from the claim text.