Accelerator for encrypting or decrypting confidential data with additional authentication data
AssigneeIntel Corporation
InventorsJames GUILFORD, Vinodh GOPAL, Kirk YAP
Life of this patent
Estimating the term…
Abstract
Disclosed embodiments relate to encrypting or decrypting confidential data with additional authentication data by an accelerator and a processor. In one example, a processor includes processor circuitry to compute a first hash of a first block of data stored in a memory, store the first hash in the memory, and generate an authentication tag based in part on a second hash. The processor further includes accelerator circuitry to obtain the first hash from the memory, decrypt a second block of data using the first hash, and compute the second hash based in part on the first hash and the second block of data.
Claims20
An apparatus comprising:
- processor circuitry to:
- compute a first hash of a first block of data stored in a memory,
- store the first hash in the memory, and
- generate an authentication tag based in part on a second hash;
- and
- accelerator circuitry to:
- obtain the first hash from the memory,
- decrypt a second block of data using the first hash, and
- compute the second hash based in part on the first hash and the second block of data.
A method comprising:
- computing, using processor circuitry, a first hash of a first block of data stored in a memory;
- storing, using processor circuitry, the first hash in the memory;
- generating, using processor circuitry, an authentication tag based in part on a second hash;
- obtaining, using accelerator circuitry, the first hash from the memory;
- decrypting, using accelerator circuitry, a second block of data using the first hash;
- and
- computing, using accelerator circuitry, the second hash based in part on the first hash and the second block of data.
A non-transitory machine-readable medium containing instructions that, when executed by a processor, cause the processor to respond by:
- computing, using processor circuitry, a first hash of a first block of data stored in a memory;
- storing, using processor circuitry, the first hash in the memory;
- generating, using processor circuitry, an authentication tag based in part on a second hash;
- obtaining, using accelerator circuitry, the first hash from the memory;
- decrypting, using accelerator circuitry, a second block of data using the first hash;
- and
- computing, using accelerator circuitry, the second hash based in part on the first hash and the second block of data.
Dependencies are inferred from the claim text.