KERNEL SENSITIVE DATA PROTECTION METHOD BASED ON CUSTOM HARDWARE SECURITY ATTRIBUTE

摘要

A kernel sensitive data protection method based on a custom hardware security attribute. In the method, when a kernel stores sensitive data in a memory, the sensitive data is encrypted by using an extension instruction, and the sensitive data is then decrypted when being retrieved from the memory, so as to ensure that the sensitive data will not leak into the memory in the form of plaintext. By means of the method, the performance of the overall solution is greatly improved by using custom hardware, and only very low performance overheads are brought about when kernel security is improved.