Abstract:
Apparatus, systems and methods for protection of independent vendor encryption keys with a common primary encryption key are disclosed including an apparatus including memory to store a plurality of encrypted vendor keys, memory to store a primary key; and cipher logic to use the primary key to decrypt an encrypted vendor key of the plurality of encrypted vendor keys to provide an effective key. Other implementations are disclosed.
Abstract:
An apparatus may include circuitry to permanently and inaccessibly store a first private key that is a shared secret between a manufacturer of the circuitry and a first vendor of first encrypted media information. It may also include a key ladder to provide plural layers of encryption to the first private key to generate a first result for decrypting the first encrypted media information. A cryptographic module may encrypt the first private key to generate a second result for a security purpose other than decrypting media information. The module also may include a key ladder, and the apparatus may include other key ladders using the private key.
Abstract:
Apparatus, systems and methods for mating an external code image with an on- chip private key are disclosed including a method of receiving a code image and a code key and encrypting the code image and the code key if the code image and the code key are to be placed in unsecured storage. Other implementations are disclosed.
Abstract:
A system may include a memory having a unique identifier that uniquely identifies the memory. A package may be communicatively coupled to the memory. The package may include a processor, identifier storage, and boot storage. The identifier storage may store the unique identifier from the memory. The boot storage may include instructions to control booting of the processor based on the unique identifier in the identifier storage.
Abstract:
An apparatus may include circuitry, a cryptographic module, and a key store. The circuitry may hold a private key associated with first media information. The cryptographic module may operate on the private key to generate a number of first control keys for decrypting the first media information. The key store may hold the number of first control keys from the cryptographic module. In some implementations, the key store may include sufficient storage to store more than one control key from each of a number of different crypto modules. In some implementations, the key store may receive multiple control keys simultaneously or nearly so. In some implementations, the key store may output multiple control keys simultaneously, or nearly so, for decrypting multiple streams of media information at the same time.
Abstract:
An apparatus may include circuitry, a cryptographic module, and a key store. The circuitry may hold a private key associated with first media information. The cryptographic module may operate on the private key to generate a number of first control keys for decrypting the first media information. The key store may hold the number of first control keys from the cryptographic module. In some implementations, the key store may include sufficient storage to store more than one control key from each of a number of different crypto modules. In some implementations, the key store may receive multiple control keys simultaneously or nearly so. In some implementations, the key store may output multiple control keys simultaneously, or nearly so, for decrypting multiple streams of media information at the same time.
Abstract:
An apparatus may include circuitry to permanently and inaccessibly store a first private key that is a shared secret between a manufacturer of the circuitry and a first vendor of first encrypted media information. It may also include a key ladder to provide plural layers of encryption to the first private key to generate a first result for decrypting the first encrypted media information. A cryptographic module may encrypt the first private key to generate a second result for a security purpose other than decrypting media information. The module also may include a key ladder, and the apparatus may include other key ladders using the private key.