Generating and using an enhanced initialization vector

A method for using an initialization vector for encryption, the method comprising:

• performing the following in a processor in a storage module that comprises a memory, wherein the processor includes a hardware component:
• obtaining an initialization vector for encrypting data, wherein the initialization vector is based on a logical block address to which the data is to be written and a value that changes every time that the logical block address is to be written to, wherein the initialization vector is different every time the logical block address is written to because the initialization vector is based on the value that changes every time that the logical block address is written to;
• encrypting the data at least in part by using the initialization vector;
• and storing the encrypted data in the memory, wherein the memory stores at least one previously-stored version of the data marked as obsolete, wherein the encrypted data and the at least one previously-stored version are each associated with the same logical block address but with different initialization vectors, and wherein the different initialization vectors protect against a known plain text attack by preventing differences from being identified between the encrypted data and the at least one previously-stored version.

A storage module comprising:

• a memory;
• and
• one or more controllers that each include a hardware component, wherein the one or more controllers are configured to:
• obtain data and a logical block address to which the data is to be written;
• generate an initialization vector for encrypting the data, wherein the generated initialization vector is based on the logical block address and a value that changes every time that the logical block address is to be written to, wherein the initialization vector is different every time the logical block address is written to because the initialization vector is based on the value that changes every time that the logical block address is written to;
• encrypt the data at least in part by using the initialization vector;
• and store the encrypted data in the memory, wherein the memory stores at least one previously-stored version of the data marked as obsolete, wherein the encrypted data and the at least one previously-stored version are each associated with the same logical block address but with different initialization vectors, and wherein the different initialization vectors protect against a known plain text attack by preventing differences from being identified between the encrypted data and the at least one previously-stored version.

A storage module comprising:

• a memory;
• means for encrypting the data at least in part by using an initialization vector, wherein the initialization vector is based on a logical block address to which the data is to be written and a value that changes every time that the logical block address is to be written to, wherein the initialization vector is different every time the logical block address is written to because the initialization vector is based on the value that changes every time that the logical block address is written to;
• and
• means for storing the encrypted data in the memory, wherein the memory stores at least one previously-stored version of the data marked as obsolete, wherein the encrypted data and the at least one previously-stored version are each associated with the same logical block address but with different initialization vectors, and wherein the different initialization vectors protect against a known plain text attack by preventing differences from being identified between the encrypted data and the at least one previously-stored version;
• wherein the means for encrypting and the means for storing are implemented by one or more controllers that include a hardware component.