Physical address randomization for secure encrypted memory

Patent metadata

Field	Value
Publication number	US-10810137-B2
Application number	US-201715443745-A
Country	US
Kind code	B2
Filing date	Feb 27, 2017
Priority date	Feb 27, 2017
Publication date	Oct 20, 2020
Grant date	Oct 20, 2020

Abstract

An operating system (OS) receives a request to allocate a physical memory page to an address space of an application. The OS maintains a data structure that stores references to a plurality of physical memory pages that are available to be allocated, and generates a random index into the data structure, wherein the random index comprises a random number, and wherein the random index corresponds to a first reference for a first physical memory page of the plurality of physical memory pages. The OS selects the first physical memory page of the plurality of memory pages from the data structure using the random index, and maps the first physical memory page to the address space of the application.

First claim

What is claimed is:

1. A method, comprising:
maintaining, by a computing device executing an operating system, a first data structure that stores references to a first plurality of physical memory pages that are available to be allocated to a first processor, and a second data structure that stores references to a second plurality of physical memory pages that are available to be allocated to a second processor and;
detecting, by the computing device, a page fault generated in response to an attempt by an application to access a virtual memory address associated with a memory address space of the application;
determining, responsive to detecting the page fault, whether the application has been executed on the first processor or the second processor;
invoking, by the computing device, responsive to determining that the application has been executed on the first processor, a random index generator to generate a random index into the first data structure, wherein the random index comprises a random number, and wherein the random index corresponds to a first reference for a first physical memory page of the first plurality of physical memory pages;
selecting, by the computing device, the first physical memory page of the first plurality of physical memory pages from the first data structure using the random index; and
mapping the first physical memory page to the memory address space of the application.

2. The method of claim 1 , wherein the application is a virtual machine application.

3. The method of claim 1 , wherein generating the random index comprises generating a random number that corresponds to an item in the first data structure.

4. The method of claim 1 , wherein the random index is generated when the operating system initializes.

5. The method of claim 1 , wherein the random index is generated when the application initializes.

6. The method of claim 1 , wherein the random index is generated when the page fault is detected.

7. The method of claim 1 , wherein generating the random index comprises:
starting a timer to expire after a first time period; and
responsive to determining that the first time period has expired, generating the random index.

8. The method of claim 1 , further comprising:
removing a reference to the first physical memory page from the first data structure.

9. The method of claim 1 , further comprising:
receiving a request from the application to write data to the first physical memory page;
encrypting the data in view of location information associated with the first physical memory page to generate an encrypted data; and
writing the encrypted data to the first physical memory page.

10. A system comprising:
a memory;
a computing device, operatively coupled to the memory, wherein the computing device comprises a first processor and a second processor, and wherein the computing device is to execute an operating system to:
maintain a first data structure that stores references to a first plurality of physical memory pages that are available to be allocated, wherein the first plurality of physical memory pages is apportioned to the first processor;
maintain a second data structure that stores references to a second plurality of physical memory pages that are available to be allocated, wherein the second plurality of physical memory pages is apportioned to the second processor;
receive a request to allocate a physical memory page to an address space of an application;
determine, responsive to receiving the request to allocate the physical memory page, whether the application has been executed on the first processor or the second processor;
generate, responsive to determining that the application has been executed on the first processor, a random index into the first data structure, wherein the random index comprises a random number, and wherein the random index corresponds to a first reference for a first physical memory page of the first plurality of physical memory pages;
select, by the computing device executing the operating system, the first physical memory page of the first plurality of physical memory pages from the first data structure using the random index; and
map the first physical memory page to the address space of the application.

11. The system of claim 10 , wherein to receive the request, the computing device is to:
detect a page fault generated by the application responsive to an attempt by the application to access a virtual memory address associated with the address space of the application.

12. The system of claim 10 , wherein the first data structure comprises a list of references to available physical memory pages associated with the first processor, and wherein to generate the random index, the computing device is to generate a random number that corresponds to an item on the list of references.

13. The system of claim 10 , wherein the random index is generated when the operating system initializes.

14. The system of claim 10 , wherein to maintain the first data structure, the computing device is to:
identify the first plurality of physical memory pages for the first processor;
store the references to the first plurality of physical memory pages in the first data structure; and
remove, responsive to selecting the first physical memory page, the reference to the first physical memory page from the first data structure.

15. The system of claim 10 , wherein to generate the random index, the computing device is to:
start a timer to expire after a first time period; and
responsive to determining that the first time period has expired, generate the random index.

16. A non-transitory computer readable storage medium, having instructions stored therein, which when executed by a computing device, cause the computing device to execute a hypervisor to:
maintain a first data structure that stores references to a first plurality of physical memory pages that are available to be allocated to a first processor, and a second data structure that stores references to a second plurality of physical memory pages that are available to be allocated to a second processor and;
detect a page fault generated in response to an attempt by an application to access a virtual memory address associated with a memory address space of a virtual machine;
determining, responsive to detecting the page fault, whether the application has been executed on the first processor or the second processor;
invoke, responsive to determining that the application has been executed on the first processor, a random index generator to generate a random index into the first data structure, wherein the random index comprises a random number, and wherein the random index corresponds to a first reference for a first physical memory page of the first plurality of physical memory pages;
select the first physical memory page of the first plurality of physical memory pages from the first data structure using the random index; and
map the first physical memory page to the memory address space of the virtual machine.

17. The non-transitory computer readable storage medium of claim 16 , wherein the application is a virtual machine application.

18. The non-transitory computer readable storage medium of claim 16 , wherein to generate the random index the hypervisor is to generate a random number that corresponds to an item in the first data structure.

19. The non-transitory computer readable storage medium of claim 16 , wherein the random index is generated when the hypervisor initializes.

Assignees

• Red Hat Inc

Inventors

• Tsirkin Michael
• Bonzini Paolo

Classifications

• G06F2212/151

  Emulated environment, e.g. virtual machine · CPC title

• G06F12/08

  in hierarchically structured memory systems, e.g. virtual memory systems · CPC title

• G06F2009/45583

  Memory management, e.g. access or allocation · CPC title

• G06F12/1408 Primary

  by using cryptography (for digital transmission H04L9/00) · CPC title

• G06F2212/1052

  Security improvement · CPC title