Compiler-assisted memory encryption for embedded processors

Abstract. A critical component in the design of secure processors is memory encryption which provides protection for the privacy of code and data stored in off-chip memory. The overhead of the decryption op-eration that must precede a load requiring an off-chip memory access, decryption being on the critical path, can significantly degrade perfor-mance. Recently hardware counter-based one-time pad encryption tech-niques [11,13,9] have been proposed to reduce this overhead. For high-end processors the performance impact of decryption has been successfully limited due to: presence of fairly large on-chip L1 and L2 caches that reduce off-chip accesses; and additional hardware support proposed in [13,9] to reduce decryption latency. However, for low- to medium-end embedded processors the performance degradation is high because first they only support small (if any) on-chip L1 caches thus leading to sig-nificant off-chip accesses and second the hardware cost of decryption la-tency reduction solutions in [13,9] is too high making them unattractive for embedded processors. In this paper we present a compiler-assisted strategy that uses minimal hardware support to reduce the overhead of memory encryption in low- to medium-end embedded processors. Our experiments show that the proposed technique reduces average execution time overhead of memory encryption for low-end (medium-end) embed-ded processor with 0 KB (32 KB) L1 cache from 60 % (13.1%), with single counter, to 12.5 % (2.1%) by additionally using only 8 hardware counter-registers.