Qualcomm Incorporated

Intel Corporation

Darren Lasko

Roberto Avanzi

Thomas Philip Speier

Vikramjit Sethi

Harb Abdulhamid

Harold Wade Cain, Iii

Jawad Basit Khan

Knut Stener Grimsrud

Richard Paul Mangold

Anand S Ramalingam

Nicholas D Triantafillou

Paritosh Saxena

Rosario Cammarota

Paul J Thadikaran

Thomas R Bowen

Nathaniel G Burke

Adam Greer Wright

Reginald David Nepomuceno

Janet Yabeny Sholar

Ramesh Chandra Chauhan

Unnikrishnan Jayakumar

William B Lindquist

John A List

A method, apparatus, and system for storing memory encryption realm key IDs is disclosed. A method comprises accessing a memory ownership table with a physical address to determine a realm ID associated with the physical address, accessing a key ID association structure with the realm ID to determine a realm key IS associated with the realm ID, and initiating a memory transaction based on the realm key ID. Once retrieved, the realm key ID may be stored in a translation lookaside buffer.

Method, apparatus, and system for storing memory encryption realm key IDs

Some embodiments include systems and methods for the management of a plurality of expanded cryptographic keys associated with a plurality of corresponding Protected Software Environments (PSEs) supervised by PSE-management software running on a computer system. In one embodiment, a computer system has a first processor, a first memory controller, and a first RAM. The first memory controller has a first memory cryptography circuit connected between the first processor and the first RAM. The memory cryptography circuit comprises a keystore and a first cryptographic engine. The keystore comprises a seedstore and a key-expansion engine. The seedstore is configured to store a first plurality of cryptographic key seeds accessible by a key identifier, for use by the key-expansion engine to generate expanded keys, where each key seed corresponds to a corresponding client.

Dynamic cryptographic key expansion

Techniques for preventing side-channel attacks on a cache are provided. A method according to these techniques includes executing a software instruction indicating that a portion of software requiring data protection is about to be executed, setting the cache to operate in a randomized mode to de-correlate cache timing and cache miss behavior from data being processed by the portion of software requiring data protection responsive to the instruction indicating that the portion of software requiring data protection is about to be executed, executing the portion of software requiring data protection, storing the data being processed by the portion of software requiring data protection, and setting the cache to operate in a standard operating mode responsive to an instruction indicating that execution of the portion of software requiring data protection has completed.

Multi-modal memory hierarchical management for mitigating side-channel attacks in the cloud

Methods and apparatus related to generating random numbers utilizing the entropic nature of NAND flash memory medium are described. In one embodiment, a data pattern is written to a portion of a non-volatile memory device and is subsequently read multiple times. Based on the read operations, at least one bit is marked for random number generation based at least partially on comparison of a number of flips by the at least one bit and a threshold value. Other embodiments are also disclosed and claimed.

Generating random numbers utilizing entropic nature of NAND flash memory medium

Systems and methods for providing anti-malware protection on storage devices are described. In one embodiment, a storage device includes a controller, firmware, and memory. The firmware communicates with an authorized entity (e.g., external entity, operating system) to establish a secure communication channel. The system includes secure storage to securely store data.

Systems and methods for providing anti-malware protection on storage devices

Growing community of inventors

Forest, VA, United States of America

Darren Lasko