Multi-tenant cryptographic memory isolation

A method for multi-tenant cryptographic memory isolation, the method comprising:

• receiving, by multiple key total memory encryption (MKTME) circuitry, a read request for encrypted memory, the read request including an encrypted memory address, the encrypted memory address including a sequence of keyid bits and physical address bits;
• retrieving, by the MKTME circuitry, a keyid-nonce from a key table using the keyid bits;
• constructing, by the MKTME circuitry, a tweak from the keyid-nonce, the keyid bits, and the physical address bits;
• and
• decrypting, by the MKTME circuitry using the tweak and a common key, data specified by the read request with the encrypted memory address.

At least one non-transitory machine readable medium including instructions for multi-tenant cryptographic memory isolation, the instructions, when executed by processing circuitry, cause the processing circuitry to perform operations comprising:

• receiving, by multiple key total memory encryption (MKTME) circuitry, a read request for encrypted memory, the read request including an encrypted memory address, the encrypted memory address including a sequence of keyid bits and physical address bits;
• retrieving, by the MKTME circuitry, a keyid-nonce from a key table using the keyid bits;
• constructing, by the MKTME circuitry, a tweak from the keyid-nonce, the keyid bits, and the physical address bits;
• and
• decrypting, by the MKTME circuitry using the tweak and a common key, data specified by the read request with the encrypted memory address.