Secure memory translations

A method comprising:

• receiving a translation request from one of a plurality of peripherals to translate an input address within an input domain to an output address within an output domain;
• generating a signature of at least part of the output address using a private key;
• transmitting to the one of the peripherals a translation response, including the output address and the signature;
• receiving access requests to a memory, wherein each of the access requests comprises a desired memory address in the output domain and a signature of the desired memory address;
• performing validation of the signature of the desired memory address using the private key;
• and
• in response to the validation of a given access request failing, performing an error action.

An apparatus, connectable to a memory and one or more peripherals, the apparatus comprising:

• means for receiving a translation request from one of a plurality of peripherals to translate an input address within an input domain to an output address within an output domain;
• means for generating a signature of at least part of the output address using a private key;
• means for transmitting to the one of the peripherals a translation response, including the output address and the signature;
• means for receiving access requests to a memory, wherein each of the access requests comprises a desired memory address in the output domain and a signature of the desired memory address;
• means for performing validation of the signature of the desired memory address using the private key;
• and
• means for performing an error action in response to the validation of a given access request failing.