Digest generation from instruction op-codes

• US 8,458,460 B2
• Filed: 09/27/2007
• Issued: 06/04/2013
• Est. Priority Date: 09/27/2007
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: King, Steven R., Johnson, Erik J.
• Primary Examiner(s): Shiferaw, Eleni
• Assistant Examiner(s): VU, PHY ANH TRAN
• Application Number:
  US11/863,137
• Publication Number:
  US 20090089578A1
• Time in Patent Office: 2,077 Days
• Field of Search: 713/161, 713/167, 713/190, 713/193, 726 21- 25, 726 27- 30
• US Class Current: 713/161
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: H04L 2209/125 Parallelization or pipelining, e.g. for accelerating processing of cryptographic operations
• CPC Class Codes: H04L 9/0643 Hash functions, e.g. MD5, SHA, HMAC or f9 MAC

Abstract

In general, in one aspect, a computer-implemented method includes determining a digest value based on hash operations on values of, at least, a set op-codes of multiple instructions of a program during execution of the program by a processor.

Claims

1. A computer-implemented method, comprising:

setting a digest value to an initial value; and

updating, by a processor, the digest value based on a sequence of hash operations on values of, at least, a set op-codes of multiple instructions of a program during execution of the multiple instructions of the program by the processor, wherein the sequence of the hash operations is based on an order of actual execution of the multiple instructions of the program by the processor;

wherein a digest value associated with a first order of execution of the multiple instructions is a different value than a digest value associated with a second, different, order of execution of the multiple instructions;

wherein the multiple instructions include at least one conditional instruction; and

wherein the digest value based on the sequence of the hash operations is updated for each of the multiple instructions as each respective instruction of the multiple instructions undergoes an execution process of the processor.

2. The computer-implemented method of claim 1, wherein the hash operations do not operate on values stored in any operands of the multiple instructions.

3. The computer-implemented method of claim 1, comprising:

performing at least one comparison of the digest value based on the sequence of the hash operations and at least one expected value.

4. The computer-implemented method of claim 1, further comprising:

including data of a digest value in a network packet.

5. The computer-implemented method of claim 1, further comprising:

receiving an instruction indicating that subsequently executed instructions are included in the multiple instructions; and

receiving an instruction indicating that subsequently executed instructions are be included in the multiple instructions.

6. The computer-implemented method of claim 1, further comprising:

performing a transformation of the digest value in accordance with a processor key.

7. The computer-implemented method of claim 1, further comprising:

receiving an instruction that initializes the digest value based on the sequence of the hash operations to a seed value.

8. The computer-implemented method of claim 1, comprising:

performing at least one comparison of the digest value based on the sequence of the hash operations and at least a value received in a network packet.

9. The computer-implemented method of claim 1, execution of the multiple instructions comprises:

a fetch operation, a decode operation, an execution operation, and a retirement operation.

10. An apparatus to execute program instructions, the apparatus comprising:

a circuitry configured to access instructions of a program and determine a digest value based on a sequence of hash operations on values of, at least, a set op-codes of multiple instructions of a program during execution of the multiple instructions of the program by a processor, wherein the sequence of the hash operations is based on an order of actual execution of the multiple instructions of the program by the processor;

wherein a digest value associated with a first order of execution of the multiple instructions is a different value than a digest value associated with a second, different, order of execution of the multiple instructions;

wherein the multiple instructions may include at least one conditional instruction; and

wherein the digest value based on the sequence of the hash operations is updated for each of the multiple instructions as each respective instruction of the multiple instructions undergoes an execution process of the processor.

11. The apparatus of claim 10, wherein the hash operations do not operate on values stored in any operands of the multiple instructions.

12. The apparatus of claim 10, wherein the apparatus provides:

a processor instruction having an op-code indicating that subsequently executed instructions are included in the multiple instructions; and

a processor instruction having an op-code indicating that subsequently executed instructions are not included in the multiple instructions.

13. The apparatus of claim 10, further comprising:

a logic to perform a transformation of an intermediate value of the digest value based on the sequence of the hash operations in accordance with a processor key.

14. The apparatus of claim 10 further provides:

an instruction that initializes the digest value based on the sequence of the hash operations to a seed value.

15. The apparatus of claim 10, further comprising:

an instruction fetch circuitry;

an instruction decode circuitry to operate on instructions fetched by the instruction fetch circuitry;

an instruction execution circuitry to execute the instructions decoded by the instruction decode circuitry; and

a digest circuitry to access instructions, determine the digest value based on the sequence of the hash operations, and write the digest value based on the sequence of the hash operations to a memory.

16. A computer-implemented method, comprising:

accessing, by a processor, a value based on a sequence of hash operations on values of, at least, a set op-codes of multiple instructions of a program during execution of the multiple instructions of the program by a second processor, wherein the sequence of the hash operations is based on an order of actual execution of the multiple instructions by the second processor; and

performing an operation based on the accessed value and an expected value,

wherein a digest value associated with a first order of execution of the multiple instructions is a different value than a digest value associated with a second, different, order of execution of the multiple instructions;

wherein the multiple instructions include at least one conditional instruction; and

wherein the accessed value reflects an update for each of the multiple instructions as each respective instruction of the multiple instructions underwent an execution process of the second processor.

17. The computer-implemented method of claim 16, wherein the hash operations do not operate on values stored in any operands of the multiple instructions.

18. The computer-implemented method of claim 16, wherein the accessed value comprises a value included in a received network packet.

19. The computer-implemented method of claim 16, wherein the accessed value comprises transformation of a value of the hash operations by a key.

20. An apparatus comprises:

a circuitry configured to;

access, at least, an op-code of a first instruction of a program currently loaded in an execution pipeline of a processor;

update a digest value based at least in part on at least one first hash operation based on, at least, the accessed op-code of the first instruction;

access, at least, an op-code of a second instruction of the program currently loaded in the execution pipeline of the processor; and

update the digest value based at least in part on at least one second hash operation based on, at least, the accessed op-code of the second instruction,

wherein an order of the first and second hash operations is based on an order of actual execution of the first and the second instructions of the program by the processor,

wherein a digest value associated with a first order of execution of the first and second instructions is a different value than a digest value associated with a second, different, order of execution of the first and second instructions;

wherein the first and second instructions include at least one conditional instruction.

21. The apparatus of claim 20, wherein the execution pipeline of the processor comprises:

an instruction fetch circuitry;

an instruction decode circuitry to operate on instructions fetched by the instruction fetch circuitry;

an instruction execution circuitry to execute the instructions decoded by the instruction decode circuitry; and

a digest circuitry to update the digest value associated with the first order of execution of the first and second instruction.

22. The apparatus of claim 21, wherein the execution pipeline of the processor further comprises:

a storage of a processor key; and

a circuitry to digitally sign the digest value associated with the first order of execution of the first and second instruction using the processor key.

23. The apparatus of claim 21, further comprising circuitry to:

compare the digest value associated with the first order of execution of the first and second instruction with an expected digest value.

24. The apparatus of claim 21, wherein the processor comprises:

a processor having an instruction op-code identifying a set of at least one subsequently executed instruction that updates the digest value associated with the first order of execution of the first and second instruction.

25. The apparatus of claim 21, wherein the processor comprises:

a processor having an instruction op-code to set the digest value associated with the first order of execution of the first and second instruction to a seed value.

26. The apparatus of claim 21, wherein the processor comprises:

a processor having at least one instruction op-code that references the digest value associated with the first order of execution of the first and second instruction as an operand.