Synopsys, Inc.

Elliptic Technologies Inc.

Other

Elliptic Semiconductor Inc.

Michael Bowler

Neil Hamilton

Andrew Alexander Elias

Michael Andrew Borza

Nimisha Limaye

A method includes: receiving an input message; computing values based on the input message; initializing an accumulator value; iterating, by a processor, through bits of a secret key, each iteration including: selecting a specified number of next most significant bits (MSBs) of the secret key as a bitstring of selected bits; selecting, randomly, one of the values computed from the input message; in a case where all bits of the bitstring of selected bits of the secret key have values of zero: updating the accumulator value based on the specified number of the next MSBs; and performing a dummy operation based on the accumulator value and the randomly selected one of the values computed from the input message; generating an output message based on a value stored in the accumulator value after iterating through the bits of the secret key.

Side-channel resilient public key cryptography

A method and apparatus are disclosed for providing a DMA process. Accordingly, a DMA process is initiated for moving data from contiguous first locations to contiguous second locations and to a third location or third locations. Within the DMA process the data from each of the contiguous first locations is retrieved and stored in a corresponding one of the contiguous second locations and in the third location or corresponding one of the third locations. The DMA process is performed absent retrieving the same data a second other time prior to storing of same within the corresponding one of the contiguous second locations and in the third location or corresponding one of the third locations.

Memory data transfer method and system

A method and system for protecting the integrity of a memory system. An age counter and an opportunity counter are provided for each of multiple memory blocks. An epoch counter is provided for the memory system. Data is written in a selected memory block which increases the local sequence number of the selected memory block. The opportunity counter for the selected memory block is updated if the local sequence number of the selected memory block rolls over. A message authentication code (MAC) is generated in the selected memory block based on a global sequence number and the local sequence number. The age counter and the opportunity counter are updated for memory blocks when the opportunity counter for the memory blocks matches the LSB of the epoch counter. A new MAC is generator for any memory block for which the updating is performed.

Integrity protection for data storage

A method and system for detecting tampering of authenticated memory blocks that are accessible by an untrusted host processor, by (1) periodically re-authenticating the memory blocks from a trusted computing environment, and (2) disabling accessing of the memory blocks by the untrusted host processor when the re-authenticating fails. In one implementation, each of the memory blocks has an authentication code, and the accessing of the memory blocks is disabled by disabling the untrusted host processor. The memory blocks may be re-authenticated sequentially, or randomly, e.g., based on a random block selection based on the block location, or based on temporal randomness. The re-authenticating is preferably effected by an authentication module in the trusted computing environment.

Memory tamper detection

A method and system for detecting tampering of authenticated memory blocks that are accessible by an untrusted host processor. by (1) periodically re-authenticating the memory blocks from a trusted computing environment, and (2) disabling accessing of the memory blocks by the untrusted host processor when the re-authenticating fails. In one implementation, each of the memory blocks has an authentication code, and the accessing of the memory blocks is disabled by disabling the untrusted host processor. The memory blocks may be re-authenticated sequentially or randomly, e.g., based on a random block selection based on the block location, or based on temporal randomness. The re-authenticating is preferably effected by an authentication module in the trusted computing environment.

A system for protecting the integrity of a memory system maintains an age counter and an opportunity counter for each of multiple memory blocks; maintains an epoch counter for the memory system; writes data in a selected memory block; increases the local sequence number of the selected memory block; updates the opportunity counter for the selected memory block if the local sequence number of the selected memory block rolls over; computes a message authentication code (MAC) in the selected memory block based on a global sequence number and the local sequence number; updates the age counter and the opportunity counter for any non-selected memory blocks if the opportunity counter for the non-selected memory blocks does not match the LSB of the epoch counter for the non-selected memory blocks; and computes a new MAC for any memory block for which the updating is performed.

An architecture for use in packet processing and supporting compatibility with current BSD implementations for packet processing is proposed wherein two MBUF formats are supported. A first format includes a header portion and a data portion for storing data therein. A second format includes a header portion but is absent a data portion and is for addressing data stored within a cluster and external to the MBUF itself.

Packet memory processing system having memory buffers with different architectures and method therefor

A method and apparatus are disclosed for prefragmenting or presegmenting data. A data protocol type and length are provided. Based on the type and length, a linked list memory buffer structure is determined. Locations within the memory buffer structure for storage of data therein is also determined allowing for sufficient unused memory therein to support one of a fragmentation operation and a segmentation operation subsequent to memory allocation. As such, further memory allocation during a fragmentation operation or a segmentation operation is obviated. The determined memory buffer structure is then allocated.

Growing community of inventors

Ottawa, Canada

Michael Bowler