Secure stream protocol for serial interconnect

An apparatus comprising:

• first interface circuitry to:
• secure a first transaction layer packet (TLP) in a first stream of a plurality of streams based, at least in part, on a first transaction type of the first TLP, wherein the first transaction type is one of a plurality of transaction types including a posted transaction type and a non-posted transaction type, wherein to secure the first TLP in the first stream is to include:
• encrypting a first data portion of the first TLP based in part on a first counter assigned to the first stream;
• computing a first message authentication code over at least the encrypted first data portion and a first header in the first TLP;
• and
• adding the first message authentication code to the first TLP.

A system comprising:

• a first endpoint including a first input/output (I/O) interface;
• and
• a second endpoint including a second I/O interface, the second I/O interface communicatively coupled to the first I/O interface, wherein the first I/O interface is to:
• secure a first transaction layer packet (TLP) in a first stream of a plurality of streams based, at least in part, on a first transaction type of the first TLP, the first transaction type being either a posted transaction type or a non-posted transaction type, wherein to secure the first TLP in the first stream is to include:
• encrypting a first data portion of the first TLP based in part on a first counter assigned to the first stream;
• computing a first message authentication code over at least the encrypted first data portion and a first header in the first TLP;
• and
• adding the first message authentication code to the first TLP;
• and
• send the first TLP to the second endpoint.

One or more non-transitory computer-readable media with instructions stored thereon, wherein the instructions are executable to cause a machine to:

• secure, at a first device, a first transaction layer packet (TLP) in a first stream of a plurality of streams based, at least in part, on a first transaction type of the first TLP, wherein the first transaction type is one of a plurality of transaction types including a posted transaction type, a non-posted transaction type, and a completion transaction type, wherein to secure the first TLP in the first stream is to include:
• encrypting a first data portion of the first TLP based in part on a first counter assigned to the first stream;
• computing a first message authentication code over at least the encrypted first data portion and a first header in the first TLP;
• and
• adding the first message authentication code to the first TLP.

An apparatus comprising:

• first interface circuitry to:
• secure a first transaction layer packet (TLP) in a first stream of a plurality of streams based, at least in part, on a first transaction type of the first TLP, wherein the first transaction type is one of a plurality of transaction types including a posted transaction type and a non-posted transaction type, wherein to secure the first TLP in the first stream is to include:
• encrypting a first data portion of the first TLP based in part on a first key assigned to the first stream;
• computing a first message authentication code over at least the encrypted first data portion and a first header in the first TLP;
• and
• adding the first message authentication code to the first TLP.