Encrypted memory access
Various systems and methods for encrypting data are disclosed. In one aspect, the method includes receiving a memory address and a value to be written in the memory address. The method also includes encrypting the value using the memory address as an initial value for an encryption process. The method also includes storing the encrypted value in the memory address.
1. A computer-implemented method comprising:
receiving a burst access request including a memory address and a plurality of values to be written at a plurality of consecutive memory addresses in a memory, one for each value, starting from the memory address;
truncating the memory address by truncating a number of the least significant bits of the memory address, the number of least significant bits being equal to the number of consecutive memory addresses;
encrypting each value using the truncated memory address as an initial value for an encryption process; and
storing the encrypted values in the memory at the consecutive memory addresses starting from the memory address.
2. The computer-implemented method of claim 1 , wherein truncating the memory address includes:
storing a predefined value in four least significant bits of the memory address, wherein the predefined value comprises a value of four 0s or four 1s.
3. The computer-implemented method of claim 1 , wherein truncating the memory address includes:
storing a predefined value in one or more bits of the memory address.
4. The computer-implemented method of claim 1 wherein the encryption process is based on an Advanced Encryption Standard or a Data Encryption Standard.
5. The computer-implemented method of claim 1 wherein encrypting comprises:
encrypting the memory address; and
encrypting each value using the encrypted memory address.
6. The computer-implemented method of claim 5 wherein encrypting each value using the encrypted memory address value comprises an XOR operation.
7. The computer-implemented method of claim 1 wherein the memory address is associated with a write command.
8. The computer-implemented method of claim 7 wherein the memory address is not directly provided by a user.
9. The computer-implemented method of claim 1 further comprising:
scrambling the memory address prior to encrypting the values; and
encrypting the scrambled memory address using a pseudo random value.
10. The computer-implemented method of claim 9 wherein encrypting the scrambled memory address comprises an XOR operation.
11. A system comprising:
a processor configured for generating a burst access request including a memory address for a protected memory location and a plurality of values to be written at a plurality of consecutive memory addresses, one for each value, starting from the memory address;
an encryption module coupled to the processor and configured for encrypting each of the values using an encryption process that is initialized by a truncated memory address truncated by a number of the least significant bits of the memory address, the number of least significant bits being equal to the number of consecutive memory addresses; and
a memory controller coupled to the encryption module for writing the encrypted values to the consecutive memory addresses starting from the memory address.
12. The system of claim 11 wherein the encryption module is further configured to store a predefined value in four least significant bits of the memory address, wherein the predefined value comprises a value of four 0s or four 1s.
13. The system of claim 11 wherein the encryption module is further configured to store a predefined value in one or more bits of the memory address.
14. The system of claim 11 wherein the encryption process is based on an Advanced Encryption Standard or a Data Encryption Standard.
15. The system of claim 11 wherein encrypting the values comprises:
encrypting the at least a portion of the memory address; and
encrypting the data using the encrypted memory address.
16. The system of claim 15 wherein encrypting the data using the encrypted memory address comprises an XOR operation.
17. The system of claim 11 wherein the memory address is associated with a write command.
18. The system of claim 17 wherein the memory address is not directly provided by a user.
19. The system of claim 11 wherein the encryption module is further configured to:
scramble the memory address prior to initializing the encryption process; and
encrypt the scrambled memory address using a pseudo random value.
20. The system of claim 19 wherein encrypting the scrambled memory comprises an XOR operation.
21. The system of claim 11 wherein the protected memory location comprises a memory location configured to store encrypted data.
22. A computer-implemented method comprising:
receiving a burst access request including a memory address and a plurality of encrypted values, wherein the encrypted values are read from a plurality of consecutive memory addresses of a memory, one for each value, starting from the memory address;
truncating the memory address by truncating a number of the least significant bits of the memory address, the number of least significant bits being equal to the number of consecutive memory addresses;
decrypting each encrypted value using the truncated memory address as an initial value for a decryption process; and
providing the decrypted values to a processor.
23. The computer-implemented method of claim 22 further comprising:
storing a predefined value in four least significant bits of the memory address, wherein the predefined value comprises a value of four 0s or four 1s.
24. The computer-implemented method of claim 22 further comprising:
storing a predefined value in one or more bits of the memory address.
25. The computer-implemented method of claim 22 wherein the decryption process is based on an Advanced Encryption Standard or a Data Encryption Standard.
26. The computer-implemented method of claim 22 wherein decrypting comprises:
encrypting the memory address; and
decrypting the encrypted values using the encrypted memory address.
27. The computer-implemented method of claim 26 wherein decrypting the encrypted values using the encrypted memory address comprises an XOR operation.
28. The computer-implemented method of claim 22 wherein the memory address is associated with a read command.
29. The computer-implemented method of claim 28 wherein the memory address is not directly provided by a user.
30. The computer-implemented method of claim 22 further comprising:
scrambling the memory address prior to encrypting the value; and
encrypting the scrambled memory address using a pseudo random value.