Methods and apparatus for offloading encryption
A method may include transferring data from a host to an encryption offload engine through an interconnect fabric, encrypting the data from the host at the encryption offload engine, and transferring the encrypted data from the encryption offload engine to a storage device through a peer-to-peer connection in the interconnect fabric. The method may further include transferring the encrypted data from the storage device to the encryption offload engine through a peer-to-peer connection in the interconnect fabric, decrypting the encrypted data from the storage device at the encryption offload engine, and transferring the decrypted data to the host through the interconnect fabric. The method may further include transferring the encrypted data from the storage device to the host, and verifying the encryption of the encrypted data at the host.
1. A method comprising:
receiving, by at least one processor, using a first communication connection, data;
transforming the data using the at least one processor to generate transformed data; and
transferring the transformed data from the at least one processor to a device using a second communication connection;
wherein the second communication connection uses a switch connected to the at least one processor and the device.
2. The method of claim 1 , further comprising:
transferring the transformed data from the device to the at least one processor using the second communication connection;
modifying the transformed data at the at least one processor to generate modified data; and
transferring the modified data using a communication fabric.
3. The method of claim 1 , further comprising:
transferring the transformed data from the device to a host; and
verifying, at the host, the transformed data.
4. The method of claim 1 , wherein:
the data comprises a source address; and
the method further comprises associating the source address to the at least one processor.
5. The method of claim 4 , wherein:
the at least one processor is configured to obtain the data using a data structure; and
the device is configured to:
receive a write command; and
transfer the transformed data from the at least one processor to the device based on the write command.
6. The method of claim 2 , wherein:
the modified data is associated with a destination address; and
the method further comprises associating the destination address to the at least one processor.
7. The method of claim 6 , wherein:
the device is configured to:
receive a read command; and
transfer the transformed data from the at least one processor to the device based on the read command; and
the at least one processor is configured to transfer the modified data using a data structure.
8. A system comprising:
a host;
at least one processor; and
a switch configured to be connected to the at least one processor and one or more devices;
wherein the at least one processor is configured to:
receive data from the host using a first communication connection;
transform the data to generate transformed data; and
send the transformed data to the at least one of the one or more devices using a second communication connection, wherein the second communication connection uses the switch.
9. The system of claim 8 , wherein the host is configured to:
read the transformed data from the at least one of the one or more devices; and
verify the transformed data.
10. The system of claim 9 , wherein the host is configured to:
associate a destination address to the host; and
read, based on the destination address, the transformed data from the at least one of the one or more devices.
11. The system of claim 8 , wherein:
the system further comprises a submission queue configured to receive a write command from the host; and
the write command comprises a source address for the transformed data.
12. The system of claim 11 , wherein the host is configured to associate the source address to the at least one processor.
13. The system of claim 8 , wherein the at least one processor is configured to send the transformed data to the at least one of the one or more devices based on an association.
14. The system of claim 13 , wherein the at least one processor is configured to receive the data from the host based on the association.
15. The system of claim 14 , wherein the at least one of the one or more devices is configured to receive the transformed data from the at least one processor based on a write command.
16. The system of claim 8 , wherein the at least one processor is further configured to:
receive transformed data from at least one of the one or more devices using the second communication connection;
modify the transformed data to generate modified data; and
send the modified data to the host.
17. The system of claim 16 , wherein:
the system further comprises a queue configured to hold a read command; and
the read command is associated with a destination address for the modified data.
18. The system of claim 17 , wherein the host is configured to associate the destination address to the at least one processor.
19. An apparatus comprising:
a computational device comprising:
an interface configured to couple the computational device to a switch, wherein the switch is connected to a device; and
a controller coupled to the interface and configured to:
receive, using a first connection, data using the interface;
transform the data to generate transformed data; and
send, using a connection, the transformed data to the device using the interface, wherein the connection uses the switch.
20. The apparatus of claim 19 , wherein the controller is further configured to:
receive transformed data from the device using the interface;
modify the transformed data to generate modified data; and
send the modified data using the interface.