Aggregate GHASH-based message authentication code (MAC) over multiple cachelines with incremental updates

A non-transitory computer-readable storage medium having stored thereon executable computer program instructions that, when executed by one or more processors, cause the one or more processors to perform operations comprising:

• generating a metadata block corresponding to a memory line, the metadata block comprising an error correction code for the memory line and at least one metadata bit;
• generating an aggregate GHASH corresponding to a region of memory comprising a cacheline set comprising at least the memory line;
• encrypting the aggregate GHASH as an aggregate message authentication code (AMAC);
• and
• providing the AMAC, encoded versions of first data blocks, and an encoded version of the metadata block for storage on a memory module comprising the memory line.

A method comprising:

• generating, by a controller comprising hardware circuitry, a metadata block corresponding to a memory line, the metadata block comprising an error correction code for the memory line and at least one metadata bit;
• generating an aggregate GHASH corresponding to a region of memory comprising a cacheline set comprising at least the memory line;
• encrypting the aggregate GHASH as an aggregate message authentication code (AMAC);
• and
• providing the AMAC, encoded versions of first data blocks, and an encoded version of the metadata block for storage on a memory module comprising the memory line.