Memory systems and devices including examples of accessing memory and generating access codes using an authenticated stream cipher
Examples of systems and methods described herein provide for accessing memory devices and, concurrently, generating access codes using an authenticated stream cipher at a memory controller. For example, a memory controller may use a memory access request to, concurrently, perform translation logic and/or error correction on data associated with the memory access request; while also utilizing the memory address as an initialization vector for an authenticated stream cipher to generate an access code. The error correction may be performed subsequent to address translation for a write operation (or prior to address translation for a read operation) to improve processing speed of memory access requests at a memory controller; while the memory controller also generates the encrypted access code.
1. An apparatus comprising:
a memory controller comprising:
authentication logic circuitry configured to utilize a received memory address as an initialization vector for an authenticated stream cipher to generate an access code; and
translation logic circuitry configured to perform address translation using the received memory address and a command associated with the received memory address to translate a logical address of the received memory address to a physical memory address, wherein the translation logic circuitry is configured to perform the address translation, at least in part, in parallel with generation of the access code.
2. The apparatus of claim 1 , wherein the memory controller further comprises:
error correction circuitry configured to generate an error correction code for data associated with the command, wherein the error correction circuitry is configured to generate the error correction code, at least in part, in parallel with the generation of the access code.
3. The apparatus of claim 2 , wherein the error correction circuitry includes a single error correction, double error detection error correction code algorithm unit circuit configured to generate the error correction code.
4. The apparatus of claim 2 , wherein the error correction circuitry includes a low-density parity-check correction algorithm unit circuit configured to generate the error correction code.
5. The apparatus of claim 1 , further comprising:
a cache configured to store data associated with the received memory address; and
a memory configured to perform an access operation associated with the command using the access code, the data, and the physical memory address.
6. The apparatus of claim 5 , wherein the memory comprises a NAND memory device.
7. The apparatus of claim 1 , wherein the memory controller is configured to receive the command and the memory address from a host computing device via a PCIe bus.
8. The apparatus of claim 1 , wherein the authentication logic circuitry includes an Advance Encryption Standard Galois/Counter Mode (AES-GCM) pipeline for generating the access code.
9. The apparatus of claim 1 , wherein the authentication logic circuitry is configured to use the access code to encrypt data as ciphertext.
10. The apparatus of claim 1 , wherein the translation logic circuitry is configured to perform at least one of memory wear leveling, garbage collection, or write amplification.
11. A method comprising:
receiving, from a host computing device, an access command and a memory address; and
responsive to the access command:
generating an access code, wherein generating the access code includes using the memory address as an initialization vector for an authenticated stream cipher to generate the access code; and
performing address translation using the memory address and the access command to translate a logical address to a physical address, wherein the address translation is performed, at least in part, in parallel with generation of the access code.
12. The method of claim 11 , further comprising:
performing an access operation associated with the access command using the access code and the physical address.
13. The method of claim 11 , further comprising:
generating error correction code for data associated with the access command, wherein the error correction code is generated, at least in part, in parallel with the generation of the access code.
14. The method of claim 13 , wherein the error correction code is generated at least in part using a single error correction, double error detection error correction code algorithm unit circuit.
15. The method of claim 13 , wherein the error correction code is generated at least in part using a low-density parity-check correction algorithm unit circuit.
16. The method of claim 11 , wherein the access command and the memory address are received from the host computing device at a cache of a memory controller via a host bus.
17. The method of claim 11 , wherein the authenticated stream cipher comprises an advanced encryption standard (AES) cipher.
18. The method of claim 17 , further comprising:
generating, at a Galois/Counter Mode (GCM) of an authentication logic circuit, the access code based on the AES cipher.
19. The method of claim 11 , further comprising:
performing a XOR-operation to combine the access code and data associated with the access command to be written to a memory device.
20. The method of claim 19 , further comprising:
encrypting the data as ciphertext data; and
generating an authentication tag associated with the ciphertext data.