Memory Data Transfer Encryption via Tweak Seeds
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current memory data transfer security mechanisms in public cloud datacenters face challenges in maintaining data confidentiality and efficiency, particularly due to the use of platform-specific tweaks that can reveal internal setup information and induce security risks and overhead.
Innovation Solution
The implementation of a cryptographic engine that exchanges tweak seeds instead of platform-specific information, allowing for the generation of tweaks based on buffer offsets, thereby ensuring secure and efficient memory data transfer across multiple platforms without revealing sensitive information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If platform-specific tweaks are used for data encryption, then data confidentiality is maintained, but security risks increase and overhead is induced
Solution Approach 1:
The patent introduces tweak seeds as an intermediary element that replaces direct platform-specific tweak values. Instead of exchanging sensitive platform-specific information, endpoints exchange tweak seeds that can be locally transformed into the required tweaks. This intermediary mechanism maintains data confidentiality while eliminating the security risks associated with sharing platform-specific information.
2Reliability
If platform-specific tweaks are used for data encryption, then data confidentiality is maintained, but overhead increases
Solution Approach 1:
The tweak seed acts as a compact intermediary that reduces overhead. Instead of transmitting or managing large platform-specific tweak values, the system uses small tweak seeds that can be locally expanded into the full tweak values needed for encryption. This significantly reduces the overhead of key management and information exchange while maintaining confidentiality.
3Object-affected harmful factors
If tweak seeds are exchanged instead of platform-specific information, then security risks are reduced and overhead is reduced, but compatibility across platforms must be ensured
Solution Approach 1:
The patent implements a universal tweak seed mechanism that works across different platforms. The tweak seed is designed to be platform-agnostic, allowing any endpoint regardless of platform to generate the appropriate tweaks for encryption. This universal approach ensures that the same tweak seed can be used across diverse platforms, maintaining security while ensuring broad compatibility.
Data Source
AI summary
An apparatus comprising translator circuitry to receive a plurality of physical addresses of memory data, determine an offset associated with each of the physical page addresses and apply a tweak seed to each offset to generate a plurality of tweaks.