Cryptographic separation of mmio on device

One or more computer-readable storage media comprising a plurality of instructions stored thereon that, in response to being executed, cause a computing device to:

• receive, in an authentication tag register, a first authentication tag based on a memory-mapped I/O transaction using a client application cryptographic key that is uniquely associated with a client application;
• and
• determine, based on a target memory address of the memory-mapped input/output transaction, a first memory address range associated with the memory-mapped I/O transaction;
• generate a second authentication tag using a first cryptographic key from a set of cryptographic keys, wherein the first cryptographic key is uniquely associated with the first memory address range;
• determine whether the first authentication tag matches the second authentication tag;
• and
• commit the memory-mapped I/O transaction in response to a determination that the first authentication tag matches the second authentication tag.

A computer-based method for secure data transfer, comprising:

• receiving, in an authentication tag register, a first authentication tag based on a memory-mapped I/O transaction using a client application cryptographic key that is uniquely associated with a client application;
• and
• determining, based on a target memory address of the memory-mapped input/output transaction, a first memory address range associated with the memory-mapped I/O transaction;
• generating a second authentication tag using a first cryptographic key from a set of cryptographic keys, wherein the first cryptographic key is uniquely associated with the first memory address range;
• determining whether the first authentication tag matches the second authentication tag;
• and
• committing the memory-mapped I/O transaction in response to a determination that the first authentication tag matches the second authentication tag.