System and Method for Securing Nonvolatile Memory for Execute-in-Place

An integrated circuit for retrieving secured content from an external writable nonvolatile memory, comprising:

• a cache and a cache controller, wherein the cache controller provides a CPU address of a plaintext cache line;
• an address translation circuit, wherein the address translation circuit receives the CPU address as an input and generates a memory address as an output to the external writable nonvolatile memory, wherein an encrypted data structure is disposed at the memory address in the external writable nonvolatile memory, wherein the encrypted data structure comprises a NONCE, a stored MAC and an encrypted cache line;
• and
• a decryption module, wherein the decryption module utilizes a key, an initialization vector and the encrypted cache line to generate the plaintext cache line and a calculated message authentication code (MAC), wherein the initialization vector is a function of the NONCE and either the memory address or the CPU address.