Cryptographic data integrity protection
A storage device includes a memory storage region and a controller having a processor. The processor retrieves user data from the memory storage region using a physical block address corresponding to a logical block address (LBA), in response to a read command. The retrieved user data includes a first hash received through a host interface in a prior host data transmission. The processor further performs error correction on the user data to generate error-corrected user data. The processor further causes a cryptographic engine to produce a second hash of the error-corrected user data. The first hash is compared to the second hash associated with the error-corrected user data to determine a match result. A notification is generated in response to the match result.
1 . A storage device that implements cryptographic validity checking, the storage device comprising:
a memory storage region; and
a controller coupled to controller memory and the memory storage region, the controller having a processor configured to execute instructions stored on the storage device, wherein the instructions, when executed by the processor, cause the processor to perform operations comprising:
decoding at least one write command received from a host to obtain user data;
parsing a plurality of hash records stored in the controller memory to determine a hash record of the plurality of hash records that is associated with the user data;
retrieving the hash record from the controller memory; and
storing the hash record and the user data in the memory storage region.
2 . The storage device of claim 1 , wherein the operations associated with the decoding of the at least one write command comprise:
decoding a first write command received from the host to obtain the plurality of hash records.
3 . The storage device of claim 2 , wherein the operations comprise:
storing the plurality of hash records in the controller memory; and
decoding a second write command received from the host to obtain the user data.
4 . The storage device of claim 2 , wherein the operations comprise:
decoding the first write command to obtain logical block address (LBA) data, wherein the LBA data comprises the plurality of hash records associated with a corresponding plurality of hashes, and wherein the hash record of the plurality of hash records includes a hash of the user data and an LBA.
5 . The storage device of claim 4 , wherein the operations comprise:
obtaining an LBA of the user data based on decoding a second write command.
6 . The storage device of claim 5 , wherein the operations comprise:
retrieving the hash record from the controller memory based on matching the LBA of the user data with the LBA in the hash record.
7 . The storage device of claim 6 , wherein the operations comprise:
generating a notification of an execution status of the at least one write command, the execution status based on a successful completion of the matching.
8 . A method comprising:
decoding, by at least one hardware processor of a storage device, at least one write command received from a host to obtain user data;
parsing a plurality of hash records stored in controller memory to determine a hash record of the plurality of hash records that is associated with the user data;
retrieving the hash record from the controller memory; and
storing the hash record and the user data in a memory storage region of the storage device.
9 . The method of claim 8 , wherein the decoding of the at least one write command comprises:
decoding a first write command received from the host to obtain the plurality of hash records.
10 . The method of claim 9 , further comprising:
storing the plurality of hash records in the controller memory; and
decoding a second write command received from the host to obtain the user data.
11 . The method of claim 9 , further comprising:
decoding the first write command to obtain logical block address (LBA) data, wherein the LBA data comprises the plurality of hash records associated with a corresponding plurality of hashes, and wherein the hash record of the plurality of hash records includes a hash of the user data and an LBA.
12 . The method of claim 11 , further comprising:
obtaining an LBA of the user data based on decoding a second write command.
13 . The method of claim 12 , further comprising:
retrieving the hash record from the controller memory based on matching the LBA of the user data with the LBA in the hash record.
14 . The method of claim 13 , further comprising:
generating a notification of an execution status of the at least one write command, the execution status based on a successful completion of the matching.
15 . A machine-readable medium, comprising instructions, which when executed by a processor of a storage device, cause the processor to perform operations comprising:
decoding at least one write command received from a host to obtain user data;
parsing a plurality of hash records stored in controller memory to determine a hash record of the plurality of hash records that is associated with the user data;
retrieving the hash record from the controller memory; and
storing the hash record and the user data in a memory storage region of the storage device.
16 . The machine-readable medium of claim 15 , wherein the operations associated with the decoding of the at least one write command comprise:
decoding a first write command received from the host to obtain the plurality of hash records.
17 . The machine-readable medium of claim 16 , the operations further comprising:
storing the plurality of hash records in the controller memory; and
decoding a second write command received from the host to obtain the user data.
18 . The machine-readable medium of claim 16 , the operations further comprising:
decoding the first write command to obtain logical block address (LBA) data, wherein the LBA data comprises the plurality of hash records associated with a corresponding plurality of hashes, and wherein the hash record of the plurality of hash records includes a hash of the user data and an LBA.
19 . The machine-readable medium of claim 18 , the operations further comprising:
obtaining an LBA of the user data based on decoding a second write command.
20 . The machine-readable medium of claim 19 , the operations further comprising:
retrieving the hash record from the controller memory based on matching the LBA of the user data with the LBA in the hash record; and
generating a notification of an execution status of the at least one write command, the execution status based on a successful completion of the matching.