Method and apparatus for dual hardware and software cryptography

A method in a data processing system for executing cryptographic operations, the method comprising:

• responsive to a request to perform a cryptographic operation, dynamically selecting between one of a software process and a hardware process within the data processing system in a single architecture for performing the cryptographic operation based on a policy, to form a selected process;
• and
• performing the cryptographic operation using the selected process, wherein the cryptographic operation is an encryption of data using a key, wherein the key is a hardware key and the selected process is the software process and further comprising:
• converting the hardware key into a software form useable by the software process for performing the cryptographic operation.

A data processing system comprising:

• a bus system;
• a communications unit connected to the bus, wherein data is sent and received using the communications unit;
• a memory connected to the bus system, wherein a set of instructions are located in the memory;
• and
• a processor unit connected to the bus system, wherein the processor unit executes the set of instructions to (i) dynamically select between one of a software process and a hardware process within the data processing system in a single architecture for performing a cryptographic operation based on a policy, to form a selected process;
• (ii) perform the cryptographic operation using the selected process, wherein the cryptographic operation is an encryption of data using a key, wherein the key is a hardware key and the selected process is the software process;
• and (iii) convert the hardware key into a software form useable by the software process for performing the cryptographic operation.

A data processing system comprising:

• a bus system;
• a communications unit connected to the bus, wherein data is sent and received using the communications unit;
• a memory connected to the bus system, wherein a set of instructions are located in the memory;
• and
• a processor unit connected to the bus system, wherein the processor unit executes the set of instructions to (i) dynamically select between one of a software process and a hardware process within the data processing system in a single architecture for performing a cryptographic operation based on a policy, to form a selected process;
• (ii) perform the cryptographic operation using the selected process, wherein the cryptographic operation is an encryption of data using a key, wherein the key is a software key and the selected process is the hardware process;
• and (iii) convert the software key into a hardware form useable by the hardware process for performing the cryptographic operation.