Virtualized network interface for remote direct memory access over converged ethernet

摘要

A method and a system embodying the method for generating an opaque data comprising a stream identifier, comprising encrypting at least part of a stream identifier with a first secret random data to provide an encrypted stream identifier; generating a digest by applying a cryptographic hash to at least the at least the part of the stream identifier; and combining the encrypted stream identifier with the digest, is disclosed Additionally, a method and a system embodying the method for reconstructing a stream identifier from the opaque data indicating permission to access a region of a storage at an entity that generated the opaque data is disclosed.

主权项

1. A method for generating an opaque data comprising a stream identifier, which identifies memory region and access controls permitted to be accessed by data fields of a packet containing the stream identifier, the packet being formatted in accordance with remote direct memory access over converged Ethernet, comprising:
encrypting at least a part of the stream identifier with a first secret random data to provide an encrypted stream identifier; generating a digest by applying a cryptographic hash to the at least the part of the stream identifier; and combining the encrypted stream identifier with the digest to generate the opaque data, wherein the opaque data comprises a remote key (R-Key) in accordance with Infiniband specification.