Oregon Health & Science University

National Security Agency

Galois, Inc.

Galois Connections, Inc.

Thomas Nordin

John Launchbury

Mark Tullsen

William Bradley Martin

This disclosure relates to pairing of a different cryptographic key with each pointer in a data structure to form a crypto-pointer. The cryptographic key is used to encrypt the contents of all data stored at the physical location on the storage device indicated by the pointer. Preferably the only data accessible in an unencrypted form is contained in cells that are reachable from root-set crypto-pointers. Once the crypto-pointer associated with a particular memory cell is deleted, normally by overwriting or explicitly zeroing the crypto-pointer, the contents of the memory cell become inaccessible because the data stored at that cell is in encrypted form (cipher text) and the crypto-pointer that included the cryptographic key for decrypting the cipher text has been deleted from the system.

Crypto-pointers for secure data storage

In a computing system, a method of operation comprises receiving a first permutation specification of a first permutation of a first plurality of inputs, receiving a first permutation modifier and receiving a first interaction specification of a first interaction between first permutation and the first permutation modifier. A second permutation specification of a second permutation of the first plurality of inputs is generated, the second permutation being a composite permutation of the first permutation and the permutation modifier, reflective of the first specified interaction between the first permutation and the first permutation modifier.

Automated permutation method and apparatus

The present invention relates to pairing of a different cryptographic key with each pointer in a data structure to form a crypto-pointer. The cryptographic key is used to encrypt the contents of all data stored at the physical location on the storage device indicated by the pointer. Preferably the only data accessible in an unencrypted form is contained in cells that are reachable from root-set crypto-pointers. Once the crypto-pointer associated with a particular memory cell is deleted, normally by overwriting or explicitly zeroing the crypto-pointer, the contents of the memory cell become inaccessible because the data stored at that cell is in encrypted form (cipher text) and the crypto-pointer that included the cryptographic key for decrypting the cipher text has been deleted from the system.

Growing community of inventors

Munhall, PA, United States of America

Thomas Nordin