Encryption interface
Encryption interface technologies are described. A processor can include a system agent, an encryption interface, and a memory controller. The system agent can communicate data with a hardware functional block. The encryption interface can be coupled between the system agent and a memory controller. The encryption interface can receive a plaintext request from the system agent, encrypt the plaintext request to obtain an encrypted request, and communicate the encrypted request to the memory controller. The memory controller can communicate the encrypted request to a main memory of the computing device.
1. An apparatus comprising:
a central processor unit (CPU) core to generate unencrypted data to be stored in memory;
cryptographic circuitry, external to the CPU core, to:
determine the unencrypted data is to be encrypted,
encrypt the unencrypted data using an encryption key,
change the encryption key to a new encryption key based on time or memory region,
compare a re-keying urgency value against other memory traffic, and
in response to determining that re-keying urgency exceeds a threshold, update the encrypted data with the new encryption key; and
memory controller circuitry to store the encrypted data in the memory.
2. The apparatus of claim 1 , wherein the cryptographic circuitry, external to the CPU core, is to encrypt the unencrypted data according to an Advanced Encryption Standard.
3. The apparatus of claim 1 , wherein the cryptographic circuitry, external to the CPU core, is to:
receive encrypted data from the memory,
decrypt the encrypted data, and
provide the decrypted data to the CPU core.
4. The apparatus of claim 1 , wherein the cryptographic circuitry, external to the CPU core, is to:
receive data from the memory, and
upon determining the data received from the memory is unencrypted, provide the data to the CPU core without performing decryption.
5. The apparatus of claim 1 , wherein the memory is dynamic random-access memory.
6. An apparatus comprising:
a central processor unit (CPU) core to generate unencrypted data to be stored at an address in memory;
cryptographic circuitry, external to the CPU core, to encrypt the unencrypted data using an encryption key, to change the encryption key to a new encryption key based on time or memory region, compare a re-keying urgency value against other memory traffic, and in response to determining that re-keying urgency exceeds a threshold, update the encrypted data with the new encryption key;
bypass circuitry, external to the CPU, to select data from an output of the cryptographic circuitry and the unencrypted data; and
memory controller circuitry to store the selected data in the memory.
7. The apparatus of claim 6 , wherein the cryptographic circuitry, external to the CPU core, is to encrypt the unencrypted data according to an Advanced Encryption Standard.
8. The apparatus of claim 6 , wherein the cryptographic circuitry, external to the CPU core, is to:
receive encrypted data from the memory,
decrypt the encrypted data, and
provide the decrypted data to the CPU core.
9. The apparatus of claim 6 , wherein the cryptographic circuitry, external to the CPU core, is to:
receive data from the memory, and
upon determining the data received from the memory is unencrypted, provide the data to the CPU core without performing decryption.
10. The apparatus of claim 6 , wherein the memory is dynamic random-access memory.