Cryptographic data processing using a dma engine

A secure data management system comprising:

• hardware components including processing circuitry, a network interface, and a direct memory access (DMA) engine;
• and
• at least one memory device including instructions embodied thereon, wherein the instructions, which when executed by the processing circuitry, configure the hardware components to perform operations to:
• perform a secure exchange with a computing device to negotiate a shared encryption key, based on a request for data received via the network interface from the computing device;
• retrieve the data from a storage location based on an encryption command, the encryption command indicating the storage location;
• encrypt the data based on the shared encryption key to generate encrypted data;
• and
• store the encrypted data in the memory.

At least one non-transitory machine-readable storage device comprising instructions stored thereupon, which when executed by processing circuitry of a computing device, cause the processing circuitry to perform operations comprising:

• performing a secure exchange with a computing device to negotiate a shared encryption key, based on a request for data received via a network interface from a second computing device;
• retrieving the data from a storage location based on an encryption command, the encryption command indicating the storage location;
• encrypting the data based on the shared encryption key to generate encrypted data;
• and
• storing the encrypted data in a memory location of the computing device.