System on a chip (soc) communications to prevent direct memory access (dma) attacks

A method comprising:

• selecting, by one or more processors, a cipher key from a key store holding a plurality of cipher keys based on a channel ID describing source and destination information for encrypted payload;
• forming, by the one or more processors, an encryption header that includes the channel ID;
• encapsulating the encrypted payload with the encryption header that includes the channel ID to form an encrypted packet;
• and
• transmitting, by the security processor, the encrypted packet to a destination SoC.

A method comprising:

• receiving an encapsulated encrypted packet including an encryption header and encrypted payload, wherein the encryption header includes a channel ID describing source and destination information for the encrypted payload;
• decapsulating the encapsulated encrypted packet to obtain the encryption header and the encrypted payload;
• parsing the encryption header to obtain the channel ID describing the source and destination information for the encrypted payload;
• and
• selecting a decryption key from a key store holding a plurality of decryption keys based on the channel ID obtained from the encryption header.