Secure resume from a low power state

1. An apparatus, comprising:

a standby power register within a trusted execution environment (TEE), the standby power register to receive power during a sleep power mode (SPM) state of a processor element external to the TEE;

a computer-readable storage comprising a persistent key storage memory; and

logic for an SPM resume interface, a portion of which is implemented in hardware included in the TEE, the logic to:

receive a self-encrypting drive (SED) passphrase to unlock an SED;

wrap the SED passphrase with an SPM resume passphrase;

store the wrapped SED passphrase to the computer-readable storage;

store the SPM resume passphrase to the standby power register;

receive an indication that the apparatus has exited the SPM state;

receive the wrapped SED passphrase from the computer-readable storage;

receive the SPM resume passphrase from the standby power register; and

unwrap the SED passphrase with the SPM resume passphrase based on the indication that the apparatus has exited the SPM state.

2. The apparatus of claim 1 , the logic for the SPM resume interface to provide the SED passphrase to the SED to unlock the SED upon exiting the SPM.

3. The apparatus of claim 1 , the logic for the SPM resume interface to generate the SPM resume passphrase.

4. The apparatus of claim 1 , the logic to comprise an SPM resume passphrase generator to generate the SPM resume passphrase.

5. The apparatus of claim 4 , wherein the SPM resume passphrase generator comprises a random number generator, the SPM resume passphrase generator to generate the SPM resume passphrase based on the random number generator.

6. The apparatus of claim 1 , the standby power register comprising a volatile memory register, the volatile memory register operably coupled to a first power rail, the first power rail to receive current during the SPM.

7. The apparatus of claim 6 , comprising the SED, the SED operably coupled to a second power rail, the second power rail to be powered off during the SPM.

8. The apparatus of claim 1 , the standby power register and the logic for the SPM resume interface to execute in a trusted execution environment.

9. The apparatus of claim 1 , wherein the apparatus is the SED.

10. A system comprising:

a processing component included in hardware external to a trusted execution environment (TEE);

a standby power register within the TEE, the standby power register to receive power during a sleep power mode (SPM) state of the processing component;

a computer-readable storage; and

an SPM resume interface for execution by the TEE, the SPM resume interface to:

receive a self-encrypting drive (SED) passphrase to unlock an SED;

wrap the SED passphrase with an SPM resume passphrase;

store the wrapped SED passphrase to the computer-readable storage;

store the SPM resume passphrase to the standby power register;

receive an indication that the system has exited the SPM state;

receive the wrapped SED passphrase from the computer-readable storage;

receive the SPM resume passphrase from the standby power register; and

unwrap the SED passphrase with the SPM resume passphrase based on the indication that the system has exited the SPM state.

11. The system of claim 10 , comprising the SED.

12. The system of claim 10 , the SPM resume interface to provide the SED passphrase to the SED to unlock the SED upon exiting the SPM.

13. The system of claim 10 , the SPM resume interface to generate the SPM resume passphrase.

14. The system of claim 10 , comprising an SPM resume passphrase generator to generate the SPM resume passphrase.

15. The system of claim 14 , wherein the SPM resume passphrase generator comprises a random number generator, the SPM resume passphrase generator to generate the SPM resume passphrase based on the random number generator.

16. The system of claim 10 , the standby power register comprising a volatile memory register, the volatile memory register operably coupled to a first power rail, the first power rail to receive current during the SPM.

17. The system of claim 16 , comprising the SED, the SED operably coupled to a second power rail, the second power rail to be powered off during the SPM.

18. At least one non-transitory machine-readable storage medium comprising instructions that when executed by a trusted execution environment (TEE) of a device, cause the TEE to:

receive a self-encrypting drive (SED) passphrase to unlock an SED;

wrap the SED passphrase with a sleep power mode (SPM) resume passphrase;

store the wrapped SED passphrase to a computer-readable storage;

store the SPM resume passphrase to a standby power register within the TEE, the standby power register to receive power during a sleep power mode (SPM) state of a processor element external to the TEE;

receive an indication that the device has exited the SPM state;

receive the wrapped SED passphrase from the computer-readable storage;

receive the SPM resume passphrase from the standby power register; and

unwrap the SED passphrase with the SPM resume passphrase based on the indication that the device has exited the SPM state.

19. The at least one non-transitory machine-readable storage medium of claim 18 , comprising instructions that cause the TEE to provide the SED passphrase to the SED to unlock the SED upon exiting the SPM.