Virtualization of cryptographic keys

摘要

A cryptographic key is virtualized to provide a virtual cryptographic key. To virtualize the key, an operation, such as an exclusive OR operation, is used with the key and a mask. The virtual key is usable by a guest of a virtual environment in cryptographic operations.

主权项

1. A computer program product for virtualizing cryptographic keys in a virtual computing environment having a hierarchy comprising a host and one or more layers of guests, wherein a layer corresponds to a virtualization level, the computer program product comprising:
a non-transitory storage medium readable by a processing circuit and storing instructions for execution by the processing circuit for performing a method comprising:
obtaining, by a processor, a cryptographic key; andgenerating a virtual cryptographic key using an operation, the cryptographic key and a mask, wherein the mask used is determined based at least partially on the virtualization level of a guest for which the virtual cryptographic key is being generated.