Back to results
US 2019/0319781 A1Published application
Deterministic Encryption Key Rotation
AssigneeIntel Corporation
InventorsSiddhartha Chhabra, David M. Durham
Life of this patent
Estimating the term…
Abstract
There is disclosed in one example a microprocessor, including: an execution unit; a memory integrity engine (MIE) including a key rotation engine to rotate encryption keys for a secure memory region; and a memory hash register (MHR) to maintain a hash of a secure memory region state.
Claims20
A microprocessor, comprising:
- an execution unit;
- a memory integrity engine (MIE) comprising a key rotation engine to rotate encryption keys for a secure memory region;
- a memory hash register (MHR) to maintain a hash of a secure memory region state;
- and
- logic to maintain the MHR according to a present state of the key rotation engine.
2 more elements
A computing system, comprising:
- a memory;
- a trusted execution environment operable to secure a region of the memory;
- a memory integrity engine with deterministic rotation (MIE-DR) to encrypt the secure region of the memory, the MIE-DR comprising a key rotation engine to rotate message authentication code (MAC) keys within a MAC table for the secure region, and a memory hash register (MHR) to maintain a current hash of the MAC table.
A method of providing deterministic key rotation for an encrypted computer memory, comprising:
- initializing an encrypted message authentication code (MAC) table, the encrypted MAC table comprising MAC values for accessing an encrypted memory, the MAC values encrypted with an encryption key each;
- initializing a memory hash register (MHR) with a hash of the MAC table;
- periodically sequentially obsoleting and refreshing MAC values in the MAC tables;
- and
- after an update to the MAC table, recalculating the hash of the MHR.
2 more elements
Dependencies are inferred from the claim text.