Secure reduced power mode

A computing device, comprising:

• one or more processors;
• and
• memory having program instructions stored therein that are executable by the one or more processors to cause the computing device to perform operations comprising:
• receiving a request to place the computing device in a reduced power mode in which a first memory of the computing device is powered off;
• based on the request, offloading a memory page from the first memory to a second memory, wherein the offloading includes encrypting the memory page;
• based on a request to resume from the reduced power mode, restoring the memory page from the second memory to the first memory, wherein the restoring includes decrypting the encrypted memory page using a first cryptographic key accessible prior to a user authentication prompt;
• after initiating the restoring, presenting the user authentication prompt asking for a user credential;
• and
• granting access to encrypted data stored in the second memory using a second cryptographic key made accessible in response to reception of the user credential.

A method, comprising:

• receiving, by a computing device, a request to place the computing device in a reduced power mode in which a first memory of the computing device is powered off;
• based on the request, offloading, by the computing device, a memory page from the first memory to a second memory, wherein the offloading includes encrypting the memory page;
• based on a request to resume from the reduced power mode, restoring, by the computing device, the memory page from the second memory to the first memory, wherein the restoring includes decrypting the encrypted memory page using a first cryptographic key accessible prior to a user authentication prompt;
• and
• after initiating the restoring, presenting, by the computing device, the user authentication prompt asking for a user credential;
• and
• granting, by the computing device, access to encrypted data stored in the second memory using a second cryptographic key made accessible in response to reception of the user credential.