Hardware enforced one-way cryptography

• US 10,142,101 B2
• Filed: 09/29/2015
• Issued: 11/27/2018
• Est. Priority Date: 09/29/2015
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Gopal, Vinodh, Brandt, Jason W
• Primary Examiner(s): Alata, Ayoub
• Application Number:
  US14/868,579
• Publication Number:
  US 20170093567A1
• Time in Patent Office: 1,155 Days
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 9/30007 to perform operations on data operands
• CPC Class Codes: H04L 2209/12 Details relating to cryptographic hardware or logic circuitry
• CPC Class Codes: H04L 9/0643 Hash functions, e.g. MD5, SHA, HMAC or f9 MAC
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC

Abstract

Embodiments of an invention for hardware enforced one-way cryptography are disclosed. In one embodiment, a processor includes a processor key location, instruction hardware, and execution hardware. The processor key location is to hold a processor key. The instruction hardware is to receive a first instruction in an instruction set of the processor. The first instruction is to encrypt input data with the processor key and return a handle. The instruction set lacks a second instruction corresponding to the first instruction to decrypt the handle with the processor key to return the input data. The execution hardware is to perform, in response to receipt of the first instruction by the instruction hardware, encryption of the input data with the processor key and to return the handle.

Claims

1. A processor comprising:

a processor key location to hold a processor key;

an instruction decoder to decode instructions of an instruction set architecture of the processor, the instruction set architecture including a first instruction having a format including a first field and a second field, the first field for an opcode to specify an encryption to be performed by the processor to encrypt input data with the processor key and return a handle, the instruction set architecture lacking a second instruction corresponding to the first instruction to decrypt the handle with the processor key to return the input data, the second field to specify a size of the input data; and

execution hardware to perform, in response to decode of the first instruction by the instruction decoder, encryption of the input data with the processor key and to return the handle.

2. The processor of claim 1, wherein the execution hardware includes cryptography hardware to perform the encryption.

3. The processor of claim 1, wherein the execution hardware is also to perform, in response to the instruction decoder decoding the first instruction, an authentication operation.

4. The processor of claim 2, wherein the execution hardware also includes authentication hardware to perform an authentication operation in connection with the encryption to generate an authentication tag.

5. The processor of claim 4, wherein the execution hardware is also to include the authentication tag in the handle.

6. The processor of claim 1, further comprising a source storage location to specify a location of an input buffer to hold the input data.

7. The processor of claim 1, further comprising a destination storage location to specify a location of an output buffer to hold the handle.

8. The processor of claim 6, further comprising a size storage location to specify a size of the input buffer.

9. The processor of claim 1, further comprising a data storage location to specify an initialization value to be used as an input to the encryption.

10. The processor of claim 3, further comprising a data storage location to specify data to be used as an input to the authentication operation.

11. The processor of claim 1, wherein the instruction set architecture is also lacking a third instruction to read the processor key location.

12. A method comprising:

receiving, by an instruction decoder in a processor, a first instruction in an instruction set architecture of the processor, the first instruction having a format including a first field and a second field, the first field for an opcode to specify an encryption to be performed by the processor to encrypt a cryptography key with a processor key and return a handle, the instruction set architecture lacking a second instruction corresponding to the first instruction to decrypt the handle with the processor key to return the cryptography key, the second field to specify a size of the input data;

encrypting, by execution hardware in the processor in response to decode of the first instruction by the instruction decoder, the cryptography key with the processor key; and

returning, by the processor, the handle.

13. The method of claim 12, further comprising generating, by the execution hardware in the processor in response to decode of the first instruction by the instruction decoder, an authentication tag by performing an authentication operation.

14. The method of claim 13, returning the handle includes returning the authentication tag in the handle.

15. The method of claim 14, wherein after the processor returns the handle, software provides the handle to the processor in connection with a request for a cryptography operation.

16. The method of claim 15, wherein:

after software provides the handle to the processor, the processor attempts to authenticate the handle using the authentication tag; and

if authentication of the handle succeeds, the processor decrypts the handle using the processor key to re-generate the cryptography key.

17. The method of claim 16, wherein after the software provides the handle to the processor, if authentication of the handle fails, the processor generates an exception or returns an error code.

18. The method of claim 17, wherein after the processor decrypts the handle, the processor uses the re-generated cryptography key to perform the requested cryptography operation.

19. The method of claim 18, wherein after the processor performs the requested cryptography operation, the processor discards the re-generated cryptography key.

20. A system comprising:

a system memory in which to store a cryptography key; and

a processor including;

a processor key location to hold a processor key;

an instruction decoder to decode instructions of an instruction set architecture of the processor, the instruction set architecture including a first instruction having a format including a first field and a second field, the first field for an opcode to specify an encryption to be performed by the processor to encrypt input data with the processor key and return a handle, the instruction set architecture lacking a second instruction corresponding to the first instruction to decrypt the handle with the processor key to return the input data, the second field to specify a size of the input data; and

execution hardware to perform, in response to decode of the first instruction by the instruction decoder, encryption of the input data with the processor key and to return the handle.