Dynamic key and rule storage protection
A media processing device includes a key store memory to store a plurality of cryptographic keys and a rule set memory to store a plurality of rules for the plurality of cryptographic keys. The media processing device further includes an integrity module to determine a first cyclical redundancy check (CRC) value from the plurality of rules stored in the rule set memory and compare the first CRC with a second CRC value associated with the plurality of rules. The media processing device further includes an arbitration module to prevent further access to the plurality of rules in the rule set memory responsive to the integrity verification module signaling a mismatch between the first CRC and the second CRC.
1. In a media processing device, a method comprising:
determining a first cyclical redundancy check (CRC) value from a plurality of rules stored in a rule set memory of the media processing device, each rule of the plurality of rules corresponding to a corresponding cryptographic key stored at the media processing device;
comparing the first CRC value with a second CRC value corresponding to the plurality of rules; and
preventing further access to the plurality of rules in the rule set memory in response to determining a mismatch between the first CRC value and the second CRC value.
2. The method of claim 1 , further comprising:
copying the plurality of rules from a one time programmable (OTP) memory to the rule set memory; and
accessing the second CRC value from the OTP memory.
3. The method of claim 2 , further comprising:
programming the OTP memory with the first CRC value during a provisioning of the media processing device.
4. The method of claim 1 , further comprising:
determining the second CRC value based on the plurality of rules stored in the rule set memory during a boot process of the media processing device; and
wherein determining the first CRC value comprises determining the first CRC value after the boot process has finished.
5. The method of claim 1 , further comprising:
determining the second CRC value based on the plurality of rules stored in the rule set memory in response to an access to the rule set memory.
6. The method of claim 1 , wherein comparing the first CRC value with the second CRC value comprises comparing the first CRC value with the second CRC value in response to a lapse of a timer or a read access request to the rule set memory.
7. The method of claim 1 , wherein preventing further access to the plurality of rules in the rule set memory comprises wiping the plurality of rules from the rule set memory.
8. A media processing device comprising:
a key store memory to store a plurality of cryptographic keys;
a rule set memory to store a plurality of rules for the plurality of cryptographic keys; and
an integrity module coupled to the key store memory and the rule set memory, the integrity module to determine a first cyclical redundancy check (CRC) value from the plurality of rules stored in the rule set memory and compare the first CRC value with a second CRC value corresponding to the plurality of rules; and
an arbitration module coupled to the integrity module, the arbitration module to prevent further access to the plurality of rules in the rule set memory responsive to the integrity verification module signaling a mismatch between the first CRC and the second CRC.
9. The media processing device of claim 8 , further comprising:
a loader module to copy the plurality of rules from a one time programmable (OTP) memory to the rule set memory; and
the integrity module is to access the second CRC value from the OTP memory.
10. The media processing device of claim 8 , wherein the OTP memory is programmed with the first CRC value during a provisioning of the media processing device.
11. The media processing device of claim 8 , wherein:
the integrity module is to determine the second CRC value based on the plurality of rules stored in the rule set memory during a boot process of the media processing device; and
the integrity module is to determine the first CRC value after the boot process has finished.
12. The media processing device of claim 8 , wherein:
the integrity module is to determine the second CRC value based on the plurality of rules stored in the key store memory in response to an access to the rule set memory.
13. The media processing device of claim 8 , wherein:
the integrity module is to compare the first CRC value with a second CRC value in response to a lapse of a timer or a read access request for the rule set memory.
14. The media processing device of claim 8 , wherein:
the arbitration module is to prevent further access to the plurality of rules in the rule set memory by wiping the plurality of rules from the rule set memory.
15. The media processing device of claim 8 , wherein:
the key store memory and the rule set memory comprise at least one random access memory.
16. The media processing device of claim 15 , wherein:
the at least one random access memory comprises a static random access memory (SRAM).