Cryptographic data integrity protection

A method, comprising:

• retrieving user data from a memory storage region using a physical block address (PBA) corresponding to a logical block address (LBA), in response to a read command, the retrieved user data having a first hash received through a host interface in a prior host data transmission;
• performing error correction on the user data to generate error-corrected user data;
• causing a cryptographic engine to produce a second hash of the error-corrected user data, the second hash produced based on a cryptographic key shared with the host;
• comparing the first hash to the second hash associated with the error-corrected user data to determine a match result;
• and
• generating a notification in response to the match result.

A machine-readable medium, comprising instructions, which when executed by a processor of a storage device, cause the processor to perform operations comprising:

• retrieving user data from a memory storage region using a physical block address (PBA) corresponding to a logical block address (LBA), in response to a read command, the retrieved user data having a first hash received through a host interface in a prior host data transmission;
• performing error correction on the user data to generate error-corrected user data;
• causing a cryptographic engine to produce a second hash of the error-corrected user data, the second hash produced based on a cryptographic key shared with the host;
• comparing the first hash to the second hash associated with the error-corrected user data to determine a match result;
• and
• generating a notification in response to the match result.