Encrypted memory access using page table attributes

A method comprising:

• controlling, via a memory controller at a memory interface, a plurality of memory access keys respectively associated with memory regions of the memory system, wherein each memory region is allocated to a respective client;
• receiving, via the memory controller, an access request from a client, the access request including a client access key to access a memory element included in a memory region;
• looking up, via the memory controller, a memory access key from a page table attribute associated with a physical address of the memory element;
• determining, via the memory controller, if the access request is valid by comparing the client access key with the memory access key associated with the memory region that includes the memory element;
• and
• providing, via the memory controller, a response to the access request based on the determination and a mode of operation.

A programmable memory controller comprising:

• a non-transitory computer readable medium that stores configuration data for logic to enable the memory controller to:
• control a plurality of memory access keys respectively associated with memory regions of the memory system, wherein each memory region is allocated to a respective client;
• receive an access request from a client, the access request including a client access key to access a memory element included in a memory region;
• look up a memory access key from a page table attribute associated with a physical address of the memory element;
• determine if the access request is valid by comparing the client access key with the memory access key associated with the memory region that includes the memory element;
• and
• provide a response to the access request based on the determination and a mode of operation, wherein the mode of operation is one of isolation only, encryption and error correction only, or a combination of isolation, encryption and error correction.