Provisioning of secure storage for both static and dynamic rules for cryptographic key information

In a media processing device, a method comprising:

• providing a key store memory and a rule set memory, wherein the key store memory comprises a plurality of fixed-size blocks, each fixed-size block being separately indexed;
• provisioning a first segment of the key store memory to store cryptographic keys from a one-time programmable (OTP) memory of the media processing device and provisioning a first segment of the rule set memory to statically store rules for the cryptographic keys stored in the first segment of the key store memory;
• provisioning a second segment of the key store memory to store cryptographic keys and provisioning a second segment of the rule set memory to store rules dynamically generated during runtime of the media processing device for cryptographic keys stored in the second segment of the key store memory, wherein each cryptographic key stored in the second segment of the key store memory spans at least one fixed-size block;
• receiving, at an interface, a key store request comprising a cryptographic key, a rule for accessing the cryptographic key, and a key store index identifying an initial block of the second segment of the key store memory to which the cryptographic key is requested to be stored;
• and
• storing the cryptographic key to at least the initial block of the second segment of the key store memory responsive to verifying the key store request meets an alignment requirement.

A media processing device comprising:

• a one time programmable (OTP) memory to store a first set of cryptographic keys and rule set for the first set of cryptographic keys;
• a key store memory, wherein the key store memory comprises a plurality of fixed-size blocks, each fixed-size block being separately indexed;
• a rule set memory;
• an arbitration module coupled to the OTP memory, the key store memory, and the rule set memory, the arbitration module to provision:
• a first segment of the key store memory to store cryptographic keys from the OTP memory;
• a first segment of the rule set memory to statically store rules for the cryptographic keys stored in the first segment of the key store memory;
• a second segment of the key store memory to store cryptographic keys;
• and a second segment of the rule set memory to store rules dynamically generated during operation of the media processing device for cryptographic keys stored in the second segment of the key store memory, wherein each cryptographic key stored in the second segment of the key store memory spans at least one fixed-size block;
• an interface to receive a key store request comprising a cryptographic key, a rule for accession the cryptographic key, and a key store index identifying an initial block of the second segment of the key store memory to which the cryptographic key is requested to be stored;
• and
• wherein the arbitration module is to store the cryptographic key to at least the initial block of the second segment of the key store memory responsive to verifying the key store request meets an alignment requirement.

A media processing device comprising:

• a one time programmable (OTP) memory to store a first set of cryptographic keys and rule set for the first set of cryptographic keys;
• a key store memory;
• a rule set memory;
• an arbitration module coupled to the (OTP) memory, the key store memory, and the rule set memory, the arbitration module to provision, it first segment of the key store memory to store cryptographic keys from the OTP memory;
• a first segment of the rule set memory to statically store rules for the cryptographic keys stored in the first segment of the key store memory;
• a second segment of the key store memory to store cryptographic keys, and a second segment of the rule set memory to store rules dynamically generated during operation of the media processing device for cryptographic keys stored in the second segment of the key store memory;
• a loader module to store copies of cryptographic keys from the OTP memory at the first segment of the key store memory and storing copies of rules from the OTP memory at the first segment of the rule set memory during an initialization of the media processing device;
• an interface to receive a first cryptographic key and first rule for accessing the first cryptographic key;
• wherein the arbitration module is to provision the first segment of the key store memory by provisioning a segment of the key store memory used to store the cryptographic keys from the OTP memory as first segment of the key store memory;
• wherein the arbitration module is to provision the second segment of the key store memory by provisioning a remainder of the key store memory as the second segment of the key store memory;
• wherein the arbitration module is to store the first cryptographic key to a set of one or more fixed-size blocks of the second segment of the key store memory;
• and
• wherein the arbitration module is to store the first rule to a set of one or more blocks of the second segment of the rule set memory;
• wherein the interface further is to receive a second rule for accessing a cryptographic key stored at the set of one or more fixed-size blocks of the second segment of the key store memory;
• and
• wherein the arbitration module is to overwrite the first rule with the second rule in the set of one or more blocks of the second segment of the rule set memory.

A media processing device comprising:

• at least one processor;
• and
• a computer readable storage medium storing instructions to manipulate the at least one processor to:
• provision a first segment of a key store memory to store cryptographic keys from a one-time programmable (OTP) memory of the media processing device and provisioning a first segment of a rule set memory to statically store rules for the cryptographic keys stored in the first segment of the key store memory, wherein the key store memory comprises plurality of fixed-size blocks, each fixed-size block being separately indexed;
• provision a second segment of the key store memory to store cryptographic keys and provisioning a second segment of the rule set memory to store rules dynamically generated during runtime of the media processing device for cryptographic keys stored in the second segment of the key store memory, wherein each cryptographic key stored in the second segment of the key store memory spans at least one fixed-size block;
• receive, at an interface, a key store request comprising a cryptographic key, a rule for accessing the cryptographic key, and a key store index identifying an initial block of the second segment of the key store memory to which the cryptographic key is requested to be stored;
• and
• store the cryptographic key to at least the initial block of the second segment of the key store memory responsive to verifying the key store request meets an alignment requirement that the key store index represent an integer multiple of a key size that is associated with a cryptographic algorithm for the cryptographic key and which is an integer multiple of the fixed-size of the fixed-size blocks.