METHODS AND ARCHITECTURE FOR ENCRYPTING AND DECRYPTING DATA

摘要

Methods of securely encrypting and decrypting data stored within computer readable memory of a device are described. Additionally, a memory encryption unit architecture (200) is described. A disclosed encryption method comprises the steps of: providing (122) a key; encrypting (126) the data stored in the computer readable memory using the key; generating (132) an authentication code based on parameters stored in the computer readable memory; wrapping (136) the key using the authentication code to generate a wrapped key; and storing the wrapped key in the computer readable memory (30), wherein the validity of the wrapped key is linked to the authenticity of the data stored in the computer readable memory. This prevents successful decryption in the event of execution of modified or malicious code that alters the data stored in the computer readable memory.