System, Apparatus And Method For Page Granular,Software Controlled Multiple Key Memory Encryption

At least one computer readable storage medium comprising instructions that when executed enable a system to:

• generate, by a virtual machine, a key for a page of a memory allocated to the virtual machine by a supervisor of a multi-tenant computing environment including at least one processor and the memory;
• generate, by the virtual machine, an entry for a page-to-key (P2K) table stored in the memory, the entry including a key identifier for the key and an address of the page of the memory;
• and
• encrypt, by the virtual machine, at least the address of the page of the memory and send the entry including the key identifier and the encrypted address of the page of memory to the supervisor to cause the supervisor to store the entry in the P2K table, wherein the key is to be used by a memory execution circuit of the at least one processor to encrypt and decrypt data to be stored in the page of the memory by the virtual machine.

A multi-tenant computing system comprising:

• at least one processor including:
• a plurality of cores on which a plurality of agents of a plurality of tenants of the multi-tenant computing system are to execute;
• at least one cache memory coupled to the plurality of cores;
• and
• a memory execution circuit to receive data for a first agent of the plurality of agents, encrypt the data with a first key of the first agent and send the encrypted data to a memory to be stored in the memory, the memory execution circuit to obtain the first key based at least in part on a first key identifier associated with the first key and obtain the first key identifier from a page-to-key table stored in the memory;
• and
• the memory coupled to the at least one processor, the memory to store the page-to-key table having a plurality of entries, each of the plurality of entries to map a key identifier to a page of the memory, wherein at least some of the plurality of agents are to generate at least some of the plurality of entries.