Managing encryption keys per logical block on a persistent memory device

A method comprising:

• receiving, by a processing device, a first command to perform a data operation at a memory device, the first command comprising a first encryption key tag;
• accessing a first key table from local memory, the first key table comprising a first set of key entries corresponding to a first set of encryption keys;
• based on determining the first key table does not include an entry corresponding to the first encryption key tag, accessing, from random access memory (RAM), a second key table comprising a second set of key entries corresponding to a second set of encryption keys;
• determining, by the processing device, the second key table does not comprise a key entry corresponding to the first encryption key tag;
• and
• in response to determining the second key table does not comprise a key entry corresponding to the first encryption key tag, returning, by the processing device, a first error in response to the first command;
• receiving a second command to write data to the memory device, the second command comprising a second encryption key tag;
• based on determining the first key table does not include an entry corresponding to the second encryption key tag, determining whether the second key table includes a key entry corresponding to the second encryption key tag;
• and
• in response to determining the second key table does not comprise a key entry corresponding to the second encryption key tag, returning a second error in response to the second command.

A non-transitory computer-readable storage medium comprising instructions that, when executed by a processing device, configure the processing device to perform operations comprising:

• receiving a first command to perform a data operation at a memory device, the first command comprising a first encryption key tag;
• accessing a first key table from local memory, the first key table comprising a first set of key entries corresponding to a first set of encryption keys;
• based on determining the first key table does not include an entry corresponding to the first encryption key tag, accessing, from random access memory (RAM), a second key table comprising a second set of key entries corresponding to a second set of encryption keys;
• determining the second key table does not comprise a key entry corresponding to the first encryption key tag;
• in response to determining the second key table does not comprise a key entry corresponding to the first encryption key tag, returning a first error in response to the first command;
• receiving a second command to write data to the memory device, the second command comprising a second encryption key tag;
• based on determining the first key table does not include an entry corresponding to the second encryption key tag, determining whether the second key table includes a key entry corresponding to the second encryption key tag;
• and
• in response to determining the second key table does not comprise a key entry corresponding to the second encryption key tag, returning a second error in response to the second command.