Encrypted data exchange between computer systems

A system for encrypting data exchanged between two computer systems with a network encryption key, the two computer systems including the system, the system comprising:

• the computer systems each comprising one or more processing units and a memory and at least one of the computer systems comprising at least one crypto unit, the system configured to execute computer readable instructions comprising:
• a second memory having computer readable instructions;
• and
• a processor for executing the computer readable instructions, the computer readable instructions including:
• accessing content of a memory on one of the computer systems via a memory address, the accessing by at least one of the processing units of one of the computer systems;
• based on the accessing being a write operation, encrypting the content of the memory using a memory encryption key, the encrypting by a crypto unit of the at least one of the processing units;
• based on the accessing being a read operation, decrypting the content of the memory using the same memory encryption key, the decrypting by a crypto unit of the at least one of the processing units;
• establishing remote direct memory access via memory addresses between the computer systems, the establishing including at least one of the computer systems locally storing a respective network encryption key as memory encryption keys for memory areas used for the data exchange;
• based on storing new data to the memory:
• an operating system communicating memory addresses as well as the corresponding network encryption key to firmware of the computer system;
• and
• the firmware modifying a memory segment table and creating or modifying a page table by setting a flag in the memory segment table and adding a pointer pointing to the page table as well as adding a page address, a network encryption key and an encryption type to the page table;
• and
• based on reading existing data from the memory, the operating system communicating memory addresses and reading the corresponding network encryption key from firmware of the computer system.

A computer program product for encrypting data exchanged between two computer systems with a network encryption key, the computer systems each comprising one or more processing units and a memory and at least one of the computer systems comprising at least one crypto unit, the computer program product comprising:

• a non-transitory computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to perform:
• accessing content of a memory on one of the computer systems via a memory address, the accessing by at least one of the processing units of one of the computer systems;
• based on the accessing being a write operation, encrypting the content of the memory using a memory encryption key, the encrypting by a crypto unit of the at least one of the processing units;
• based on the accessing being a read operation, decrypting the content of the memory using the same memory encryption key, the decrypting by a crypto unit of the at least one of the processing units;
• establishing remote direct memory access via memory addresses between the computer systems, the establishing including at least one of the computer systems locally storing a respective network encryption key as memory encryption keys for memory areas used for the data exchange;
• based on storing new data to the memory:
• an operating system communicating memory addresses as well as the corresponding network encryption key to firmware of the computer system;
• and
• the firmware modifying a memory segment table and creating or modifying a page table by setting a flag in the memory segment table and adding a pointer pointing to the page table as well as adding a page address, a network encryption key and an encryption type to the page table;
• and
• based on reading existing data from the memory, the operating system communicating memory addresses and reading the corresponding network encryption key from firmware of the computer system.