Securing sensitive data in memory

An apparatus comprising:

• a first memory buffer comprising encrypted data to be decrypted for use by a compute process;
• a second memory buffer;
• processing circuitry communicatively coupled to the first memory buffer and the second memory buffer, the processing circuitry to:
• determine a first amount of memory space consumed by the first memory buffer;
• allocate, in the second memory buffer, a second amount of memory space which is greater than the first amount of memory space consumed the first memory buffer;
• fill the second amount of memory space with random data;
• set a pointer to a fixed memory location of the second memory buffer;
• decrypt a data element that resides in the first memory buffer;
• and
• invoke a hardware element to implement an iterative process to:
• generate a unique incarnation value based at least in part on an iteration value input;
• and
• write the decrypted data element to the second memory buffer at an address corresponding to the fixed memory address plus the unique incarnation value.

One or more computer-readable storage media comprising instructions stored thereon that, in response to being executed, cause a computing device to:

• determine a first amount of memory space consumed by a first memory buffer comprising encrypted data to be decrypted for use by a compute process;
• allocate, in a second memory buffer, a second amount of memory space which is greater than the first amount of memory space consumed the first memory buffer;
• fill the second amount of memory space with random data;
• set a pointer to a fixed memory location of the second memory buffer;
• decrypt a data element that resides in the first memory buffer;
• and
• invoke a hardware element to implement an iterative process to:
• generate a unique incarnation value based at least in part on an iteration value input;
• and
• write the decrypted data element to the second memory buffer at an address corresponding to the fixed memory address plus the unique incarnation value.