Secure high-speed communication interface between a basic input and output system and a service processor

A method comprising:

• during a power-on self-test, generating, by a basic input/output system (BIOS), a secret key that includes a symmetric key and a hash-based message authentication code key and sending the secret key to a service processor via a high-speed communication interface, wherein the secret key is stored in a system management interrupt handler;
• subsequent to the power-on self-test, transmitting, by the BIOS, a system management interrupt message that includes an encrypted message and a hash value of the encrypted message via the high-speed communication interface, wherein the encrypted message is encrypted using the symmetric key and the hash value of the encrypted message is calculated using the hash-based message authentication code key;
• receiving, by the service processor, the system management interrupt message from the BIOS;
• calculating, by the service processor, a second hash value of encrypted message based on the hash-based message authentication code key;
• verifying, by the service processor, the encrypted message by comparing a first hash value and the second hash value;
• subsequent to a successful verification that the first hash value is equal to the second hash value, decrypting, by the service processor, the encrypted message using the symmetric key;
• and
• transmitting, by the service processor, a response to the BIOS via the high-speed communication interface.

A non-transitory computer-readable medium to store instructions that are executable to perform operations comprising:

• during a power-on self-test, generating, by a basic input/output system (BIOS), a secret key that includes a symmetric key and a hash-based message authentication code key and sending the secret key to a service processor via a high-speed communication interface, wherein the secret key is stored in a system management interrupt handler;
• subsequent to the power-on self-test, transmitting, by the BIOS, a system management interrupt message that includes an encrypted message and a hash value of the encrypted message via the high-speed communication interface, wherein the encrypted message is encrypted using the symmetric key and the hash value of the encrypted message is calculated using the hash-based message authentication code key;
• receiving, by the service processor, the system management interrupt message from the BIOS;
• calculating, by the service processor, a second hash value of encrypted message based on the hash-based message authentication code key;
• verifying, by the service processor, the encrypted message by comparing a first hash value and the second hash value;
• subsequent to a successful verification that the first hash value is equal to the second hash value, decrypting, by the service processor, the encrypted message using the symmetric key;
• and
• transmitting, by the service processor, a response to the BIOS via the high-speed communication interface.