System and method for providing data integrity

A non-transitory computer readable medium configured to:

• in connection with receiving a read command at the storage resource, read a data block from the non-transitory computer readable medium, the data block including a data field, a data integrity field indicating the integrity of the data field, and a key counter value field indicating a cryptographic key used to encrypt the data block;
• determine whether the data field is encrypted with the current cryptographic key by comparing the key counter value field to the current value of a key counter register associated with the non-transitory computer readable medium, wherein the key counter register is modified each time a cryptographic key of the non-transitory computer readable medium is modified;
• in response to determining that the data field is encrypted with a cryptographic key other than the current cryptographic key, return at least a portion of the data block in reply to the read command;
• based at least on the data integrity field, determine whether the data block is corrupted;
• in response to determining that the data block is corrupted and determining that the data field is encrypted with the current cryptographic key, return an error indication in reply to the read command;
• in response to receiving an indication that the cryptographic key of the storage resource has been modified, modify the value of the key counter register by incrementing the key counter register;
• and
• append the value of the key counter register to a second encrypted data block subsequently written to the storage resource.

A storage resource having a register and configured to:

• in connection with receiving a read command at the storage resource, read a data block from a non-transitory computer readable medium, the data block including a data field, a data integrity field indicating the integrity of the data field, and a key counter value field indicating a cryptographic key used to encrypt the data block;
• determine whether the data field is encrypted with the current cryptographic key by comparing the key counter value field to the current value of a key counter register associated with the non-transitory computer readable medium, wherein the key counter register is modified each time a cryptographic key of the non-transitory computer readable medium is modified;
• in response to determining that the data field is encrypted with a cryptographic key other than the current cryptographic key, return at least a portion of the data block in reply to the read command;
• based at least on the data integrity field, determine whether the data block is corrupted;
• in response to determining that the data block is corrupted and determining that the data field is encrypted with the current cryptographic key, return an error indication in reply to the read command;
• in response to receiving an indication that the cryptographic key of the storage resource has been modified, modify a value of the key counter register by incrementing the key counter register;
• and
• append the value of the key counter register to a second encrypted data block subsequently written to the storage resource.