US 2026/0080075 A1 · METHODS AND APPARATUS FOR SELECTIVE ENCRYPTION OF EXECUTE IN PLACE (XIP) DATA

Abstract

An example apparatus includes: interface circuitry; and programmable circuitry configured to: obtain a set of processor instructions; select a first subset of processor instructions from the set; encrypt the first subset of processor instructions; select a second subset of processor instructions from the set; compute a plurality of message authentication codes (MACs) corresponding to the second subset of processor instructions; cause the interface circuitry to write the set of processor instructions to an external memory; and cause the interface circuitry to write a description of the first subset of processor instructions, a description of the second subset of processor instructions, and the plurality of MACs to the external memory.

Claims20

Dependent claims

A system comprising:

a chip;
a memory coupled to the chip;
a compute device coupled to the chip and to the memory, the compute device configurable to:
obtain data;
authenticate a first subset of the data;
encrypt a second subset of the data;
and
store, in the memory the data including the authenticated first subset and the encrypted second subset and a header section indicating the first subset and the second subset;
and
wherein the chip comprises a subsystem comprising:
an interface configurable to read the data from the memory;
and
security circuitry configurable to:
decrypt the second subset of the data based on the header;
and
authenticate the first subset of the data based on the header.

13 more elements

Dependencies are inferred from the claim text.

Facts

Application

19/393,661Filed 19 Nov 2025

Priority

29 Sep 2023

Published

19 Mar 2026

Term ends

Not estimatedThe source records don’t support an estimate.

Classification5 codes

G06F 21/602
Protecting data: providing cryptographic facilities or services
G06F 7/584
Pseudo-random number generators: using finite field arithmetic, e.g. using a linear feedback shift register
G06F 11/0787
Error or fault reporting or storing: storage of error reports, e.g. persistent data storage, storage using memory protection
G06F 21/72
To assure secure computing or processing of information: in cryptographic circuits

Methods and apparatus for selective encryption of execute in place (xip) data

Life of this patent

Methods and apparatus for selective encryption of execute in place (xip) data

Life of this patent

Abstract

Claims20