Memory data encryption method and device and memory data decryption method and device

Abstract

The invention relates to a memory data encryption method and device and a memory data decryption method and device. The memory data encryption method comprises the following steps of: obtaining a plaintext of memory data and obtaining address information of the data; encrypting the plaintext for the first time by utilizing an encryption algorithm, so as to obtain a primary ciphertext; transformingthe primary ciphertext according to the address information of the data, so as to obtain an intermediate ciphertext; encrypting the intermediate ciphertext for the second time by utilizing the encryption algorithm, so as to obtain a final secondary ciphertext. According to the memory data encryption method, a method of encrypting data for twice in memory encryption, and carrying out address mixing in the ciphertext generated at the first time to increase the safety is utilized.

Description

technical field [0001] The invention relates to the fields of computer security and software encryption, in particular to a method and device for encrypting and decrypting memory data. Background technique [0002] Existing processors generally do not encrypt used memory data, but some processors can use symmetric encryption algorithms such as AES (Advanced Encryption Standard, Advanced Encryption Standard) to encrypt memory data. For example, in AMD's SEV solution, the logical isolation of data between different virtual machines and the data isolation between virtual machines and hosts are realized by using different encryption keys for different virtual machines. However, a symmetric encryption algorithm is used to encrypt the memory data. Under the premise that a large amount of encrypted data is generated using the same key, the attacker can also find the correlation between the plaintext data by detecting the collision of the ciphertext data. [0003] The encryption me...

AI Technical Summary

Problems solved by technology

[0006] Existing scheme 2 such as figure 2 As shown, when the plaintext is the same, the ciphertext under different addresses is completely different, but the attacker moves the ciphertext to his own physical address, and he can deduce the transformation relationship according to the difference in the plaintext, thereby correcting the difference caused by different addresses and making the encryption effect Regression to Option 1

Images