System and methods for executing encrypted managed programs

A method for executing an encrypted code section in a CPU memory cache, said encrypted code section comprising a plurality of encrypted code instructions, the method comprising:

• writing said encrypted code section to said CPU memory cache;
• copying said encrypted code into a decryption module, said decryption module is loaded in a hypervisor environment;
• decrypting said encrypted code section using a decryption key, said decryption key is stored in said hypervisor environment;
• storing decrypted code instructions of said encrypted code section in said CPU memory cache;
• executing said decrypted code instructions from a designated cache-line of said CPU memory cache;
• and
• discarding said decrypted code instructions from said CPU memory cache.

A method for using a managed execution system in an improved manner to execute an encrypted managed program, said system comprising a managed execution environment, an extension module and a decryption module, said encrypted managed program comprising a plurality of executable blocks, each executable block comprising at least one instruction sequence, the method comprising:

• loading said encrypted managed program onto said managed execution environment;
• obtaining said at least one instruction sequence associated with said encrypted managed program;
• if said at least instruction sequence is not encrypted then executing said at least one instruction sequence;
• and
• if said at least one instruction sequence is encrypted then transferring, by said extension module, said encrypted instruction sequence to a decryption module;
• and
• executing, by said decryption module, said encrypted instruction sequence.