METHOD AND APPARATUS FOR MULTI-KEY TOTAL MEMORY ENCRYPTION BASED ON DYNAMIC KEY DERIVATION

摘要

The disclosed embodiments relate to multi-key full-memory encryption based on dynamic key derivation. In one example, the processor includes cryptographic circuitry, storage having a plurality of key partitions and a plurality of full cryptographic keys, fetch and decode circuitry for fetching and decoding instructions specifying an opcode, an address, and a keyID, the opcodes comprising: Requires the processor to use an address to determine whether to use an explicit key, in which case keyID is used to select one full encryption key from among multiple full encryption keys for use as an encryption key, otherwise , the processor selects one key partition from among multiple key partitions using the keyID, and dynamically derives the encryption key by providing the key partition and the root key to a key derivation function for deriving the encryption key, this The encryption key is used by the encryption circuitry to perform an encryption operation at the addressed memory location.