Cryptographic operations for secure page mapping in a virtual machine environment

A method for secure memory page mapping in a virtual machine (VM) environment, the method comprising:

• retrieving, from a table of cryptographic keys, a key identifier (key ID) that is associated with but distinct from a selected one of the cryptographic keys;
• generating an authentication code by using the selected cryptographic key to encrypt a combination of a guest linear address (GLA) and a guest physical address (GPA);
• associating a token comprising the key ID and the authentication code with a memory page to be mapped from the GLA to the GPA;
• and
• based at least in part on validating the associated token to verify that the memory page is authorized to be mapped from the GLA to the GPA, mapping the memory page to the GPA.

At least one non-transitory computer-readable storage medium having instructions stored thereon which when executed by a processor result in the following operations for secure memory page mapping in a virtual machine (VM) environment, the operations comprising:

• retrieving, from a table of cryptographic keys, a key identifier (key ID) that is associated with but distinct from a selected one of the cryptographic keys;
• generating an authentication code by using the selected cryptographic key to encrypt a combination of a guest linear address (GLA) and a guest physical address (GPA);
• associating a token comprising the key ID and the authentication code with a memory page to be mapped from the GLA to the GPA;
• and
• based at least in part on validating the associated token to verify that the memory page is authorized to be mapped from the GLA to the GPA, mapping the memory page to the GPA.