David M. Durham

CONSERVING INSTRUCTION ENCODING SPACE AND MINIMIZING CODE SIZE FOR MEMORY OPERATIONS USING PREFIX BITS TO DISTINGUISH LOAD AND STORE TAG CHECKS

SELECTIVELY CONTROLLABLE MEMORY TAG CHECKING

MEMORY SAFETY USING CRYPTOGRAPHIC ENTROPY TAGGING

INCREASING DATA-DEPENDENT MEMORY PREFETCHER ACCURACY USING MEMORY METADATA

UPSTREAM MULTI-DOMAIN ACCESS CONTROL ENCODINGS FOR A DOWNSTREAM SINGLE-DOMAIN ENCRYPTION ENGINE

METADATA DEPENDENT ERROR CORRECTION PROCESSORS, METHODS, SYSTEMS, AND INSTRUCTIONS

CIRCUITRY AND METHODS FOR LINEAR MEMORY ACCESS CONTROL TABLE SWITCHING FOR FINE GRAIN COMPARTMENTALIZATION

CIRCUITRY AND METHODS FOR MEMORY TAGGING BASED ON DATA TRANSFORMATIONS

CAPABILITY-BASED MEMORY ACCESS CONTROL FOR GRAPHICS PROCESSORS AND ACCELERATORS

REDUNDANT PARALLEL COMPUTING STRUCTURES AS A CACHE

Concept for Generating a Cryptographic Address of a Field of an Object

PROCESSORS, METHODS, SYSTEMS, AND INSTRUCTIONS TO USE DATA OBJECT EXTENT INFORMATION IN POINTERS TO INFORM PREDICTORS

CIRCUITRY AND METHODS FOR PROBABILISTIC DATA MANIPULATION DETECTION BASED ON COLLISION PATTERNS AND ENCRYPTION

APPARATUS AND METHOD FOR DATA MANIPULATION DETECTION OR REPLAY PROTECTION

Laminar flow purified air system

INSTRUCTION PREFIX ENCODING FOR CRYPTOGRAPHIC COMPUTING CAPABILITY DATA TYPES

LEGACY VIRTUAL MACHINE TO CONFIDENTIAL VIRTUAL MACHINE CONVERSION

CIRCUITRY AND METHODS FOR EFFICIENT REPLAY PROTECTION OF COMPUTER MEMORY

CIRCUITRY AND METHODS FOR MATCHING PAIR ASYMMETRICAL ENCRYPTION PROVIDING A BIRTHDAY MODE OF OPERATION

EFFICIENT SECURITY METADATA ENCODING IN ERROR CORRECTING CODE (ECC) MEMORY WITHOUT DEDICATED ECC BITS

REGION-BASED DETERMINISTIC MEMORY SAFETY

CIRCUITRY AND METHODS FOR CRYPTOGRAPHICALLY ENFORCING CONTROL-FLOW INTEGRITY

EXPLICIT INTEGRITY CHECK VALUE INITIALIZATION

INSTRUCTION TAGGING FOR INTRA-OBJECT MEMORY TAGGING

ERROR CORRECTION WITH MEMORY SAFETY AND COMPARTMENTALIZATION

MEMORY SAFETY USING TAG CHECKING INSTRUCTIONS AND ISLANDS OF TAGS IN LINE WITH BUCKETED DATA

MULTI-KEY MEMORY ENCRYPTION PROVIDING EFFICIENT ISOLATION FOR MULTITHREADED PROCESSES

EFFICIENT CACHING AND QUEUEING FOR PER-ALLOCATION NON-REDUNDANT METADATA

SECURE ERROR CORRECTING CODE (ECC) TRUST EXECUTION ENVIRONMENT (TEE) CONFIGURATION METADATA ENCODING

Memory Controller, Method for a Memory Controller and Apparatus for Providing a Trusted Domain-Related Management Service

FAST KEY ID SWITCHING VIA EXTENDED PAGING FOR CRYPTOGRAPHIC INTRA-PROCESS ISOLATION

Secure error correcting code (ECC) trust execution environment (TEE) configuration metadata encoding

System, Apparatus And Method For Integrity Protecting Tenant Workloads In A Multi-Tenant Computing Environment

TEMPORAL INFORMATION LEAKAGE PROTECTION MECHANISM FOR CRYPTOGRAPHIC COMPUTING

DETERMINISTIC ADJACENT OVERFLOW DETECTION FOR SLOTTED MEMORY POINTERS

USER-LEVEL EXCEPTION-BASED INVOCATION OF SOFTWARE INSTRUMENTATION HANDLERS

TECHNOLOGIES FOR MEMORY REPLAY PREVENTION USING COMPRESSIVE ENCRYPTION

POINTER BASED DATA ENCRYPTION

SPECULATING OBJECT-GRANULAR KEY IDENTIFIERS FOR MEMORY SAFETY

Efficient security metadata encoding in error correcting code (ECC) memory without dedicated ECC bits

REDUCING INSTRUMENTATION CODE BLOAT AND PERFORMANCE OVERHEADS USING A RUNTIME CALL INSTRUCTION

CONTROL FLOW INTEGRITY TO PREVENT POTENTIAL LEAKAGE OF SENSITIVE DATA TO ADVERSARIES

IMPLICIT MEMORY CORRUPTION DETECTION FOR CONDITIONAL DATA TYPES

Message authentication Galois integrity and correction (MAGIC) for lightweight row hammer mitigation

Apparatus, Device, and Method for a Memory Controller, Memory Controller, and System

System, apparatus and method for integrity protecting tenant workloads in a multi-tenant computing environment

MEMORY SAFETY WITH SINGLE MEMORY TAG PER ALLOCATION

Memory protection with hidden inline metadata

PROVIDING ISOLATION IN VIRTUALIZED SYSTEMS USING TRUST DOMAINS

CIRCUITRY AND METHODS FOR IMPLEMENTING MICRO-CONTEXT BASED TRUST DOMAINS

Apparatus and method for efficient process-based compartmentalization

Securing data direct I/O for a secure accelerator interface

Cryptographic computing in multitenant environments

Updating encrypted security context in stack pointers for exception handling and tight bounding of on-stack arguments

ZERO-REDUNDANCY TAG STORAGE FOR BUCKETED ALLOCATORS

Cryptographic computing using encrypted base addresses and used in multi-tenant environments

Technologies for execute only transactional memory

Collision-free hashing for accessing cryptographic computing metadata and for cache expansion

Stateless and low-overhead domain isolation using cryptographic computing

Cryptographic computing isolation for multi-tenancy and secure software components

Technologies for memory tagging

Cryptographic isolation of memory compartments in a computing environment

Region-based deterministic memory safety

ENCRYPTION INTERFACE

Memory protection with hidden inline metadata

Tagless implicit integrity with multi-perspective pattern search

Aggregate GHASH-based message authentication code (MAC) over multiple cachelines with incremental updates

RATCHET POINTERS TO ENFORCE BYTE-GRANULAR BOUNDS CHECKS ON MULTIPLE VIEWS OF AN OBJECT

Capability-based stack protection for software fault isolation

Cryptographic data objects page conversion

Cryptographic computing including enhanced cryptographic addresses

Cryptographic enforcement of borrow checking

Security check systems and methods for memory allocations

Sequestered memory for selective storage of metadata corresponding to cached data

MICROPROCESSOR PIPELINE CIRCUITRY TO SUPPORT CRYPTOGRAPHIC COMPUTING

PROCESS OBJECT RE-KEYING DURING PROCESS CREATION IN CRYPTOGRAPHIC COMPUTING

Transient side-channel aware architecture for cryptographic computing

HARDENING CPU PREDICTORS WITH CRYPTOGRAPHIC COMPUTING CONTEXT INFORMATION

Algebraic and deterministic memory authentication and correction with coupled cacheline metadata

CRYPTOGRAPHIC COMPUTING WITH CONTEXT INFORMATION FOR TRANSIENT SIDE CHANNEL SECURITY

Cryptographic system memory management

Technologies for memory replay prevention using compressive encryption

Hardware apparatuses, methods, and systems for individually revocable capabilities for enforcing temporal memory safety

System, apparatus and method for page granular, software controlled multiple key memory encryption

Message authentication code (MAC) based compression and decompression

System for address mapping and translation protection

Secure public cloud with protected guest-verified host control

Seamless access to trusted domain protected memory by virtual machine manager using transformer key identifier

Object and cacheline granularity cryptographic memory integrity

Security optimizing compute distribution in a hybrid deep learning environment

Collision-free hashing for accessing cryptographic computing metadata and for cache expansion

Data relocation for inline metadata

Aggregate GHASH-based message authentication code (MAC) over multiple cachelines with incremental updates

Memory scanning methods and apparatus

Memory region allocation to a software program

MEMORY BUS LINK AUTHENTICATION AND ENCRYPTION MECHANISMS FOR HARDWARE-BASED REPLAY PROTECTION

Apparatus and method for efficient process-based compartmentalization

Methods and apparatus to support reliable digital communications without integrity metadata

Function as a service (FaaS) system enhancements

Mitigating security vulnerabilities with memory allocation markers in cryptographic computing systems