Hybrid secure non-volatile main memory

A method for implementing a hybrid secure non-volatile main memory (HSNVMM), the method comprising:

• storing a non-working set of memory data in an encrypted format in a non-volatile memory (NVM);
• storing a working set of memory data in a decrypted format in a dynamic random-access memory (DRAM) buffer;
• selectively and incrementally encrypting and decrypting memory pages in the working and non-working sets of memory data;
• and
• controlling memory data placement and replacement in the NVM and the DRAM buffer based on memory data characteristics that include clean memory pages, dirty memory pages, working set memory pages, and non-working set memory pages, and controlling incremental encryption and decryption based on the memory data characteristics by:
• using support hints from a processor, wherein the support hints include an indication of whether a memory page in the working set of memory data is sensitive or insensitive;
• and
• based on a determination that the memory page in the working set of memory data is dirty, and based on an indication that the memory page in the working set of memory data is sensitive, encrypting the memory page.