Cryptographic Memory Initialization via Nonce Rotation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Non-Volatile Memories (NVMs) face challenges in data protection due to high write latency and limited write cycles, which can impact their lifetime when using traditional zeroing methods for initialization, and they require efficient encryption and decryption techniques to secure data.
Innovation Solution
A memory controller that changes a nonce value used in the decryption process to 'shred' content without writing to the memory region, employing a cryptographic-based technique to initialize memory regions by altering nonce values and using an AES-based block cipher for encryption and decryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional zeroing methods are used to initialize memory regions, then data protection is achieved, but write latency increases and memory lifespan decreases
Solution Approach 1:
The patent replaces the mechanical write operation with a cryptographic key rotation mechanism. Instead of physically writing zero values to memory cells, the system rotates encryption keys associated with memory regions. This substitution eliminates the wear and tear caused by repeated write operations while maintaining data protection through cryptographic means.
Solution Approach 2:
The patent changes the parameter of data representation from raw binary values to encrypted values. By storing data in encrypted form and using key rotation to initialize memory regions, the system transforms the initialization process from a physical write operation to a cryptographic key management operation, thereby reducing write cycles and extending memory lifespan.
2Reliability
If traditional zeroing methods are used to initialize memory regions, then data protection is achieved, but write latency increases
Solution Approach 1:
The patent replaces the mechanical write operation with a cryptographic key rotation mechanism. Instead of physically writing zero values to memory cells, the system rotates encryption keys associated with memory regions. This substitution eliminates the wear and tear caused by repeated write operations while maintaining data protection through cryptographic means.
Solution Approach 2:
The patent performs preliminary encryption of data before storage and establishes encryption keys in advance. When memory initialization is needed, the system uses pre-established key rotation mechanisms rather than performing time-consuming write operations, thereby reducing latency while maintaining security.
3Reliability
If encryption is applied to protect data in insecure memory areas, then data security is improved, but device complexity increases
Solution Approach 1:
The patent implements a universal encryption framework that handles multiple functions: data encryption, memory initialization, and security key management. By using a unified cryptographic approach with key rotation, the system achieves multi-functionality that reduces overall system complexity compared to implementing separate security mechanisms for each function.
Data Source
AI summary
A technique includes receiving a request to initialize a region of a memory. Content that is stored in the region is encrypted based at least in part on a stored nonce value and a key. The technique includes, in response to the request, performing cryptographic-based initialization of the memory, including altering the stored nonce value to initialize the region of the memory.