Secure replay protected storage

An apparatus, comprising:

• a flash memory device controller;
• and
• a host device, communicatively coupled to the flash memory controller, to:
• generate authentication credentials including a multi-byte signature;
• request a value from a monotonic counter via the flash memory device controller using a device key and the authentication credentials, including a truncated subset of the multi-byte signature;
• receive the value from the monotonic counter and the authentication credentials from the flash memory device controller;
• encrypt data with an incremented value from the monotonic counter;
• and
• send the encrypted data, the device key, and a command to increment the monotonic counter to the flash memory controller;
• wherein the flash memory device controller to validate the request for the value from the monotonic counter and the command to increment the monotonic counter with the device key.

A method comprising:

• generating authentication credentials including a multi-byte signature;
• requesting a value from a monotonic counter included in a flash memory device using a device key and the authentication credentials, including a truncated subset of the multi-byte signature;
• receiving the value and the authentication credentials from the monotonic counter;
• encrypting data with an incremented value from the monotonic counter;
• and
• sending the authenticated data, the device key, and a command to increment the monotonic counter to the flash memory device.