Abstract: A key delegation request is received from a host system. The key delegation request includes a new public key. A challenge is generated based on the new public key and a root public key, and the challenge is provided to the host system responsive to the request. A first and second digital signature are received from the host system. The first digital signature is generated by cryptographically signing the challenge using a new private key corresponding to the new public key and the second digital signature is generated by cryptographically signing the challenge using a root private key corresponding to the root public key. The first digital signature is validated using the new public key and the second digital signature is validated using the root public key. Based on successful validation of both signatures, the new public key is utilized in one or more cryptographic operations.

Abstract: A request for password generation is received from a host system. In response to receiving the request, a password derivation key is generated based on a key derivation seed. A password is derived from the password derivation key, and a wrapping key is derived from the password. The wrapping key is used to wrap an authorization state indication, which is stored in local memory. Encrypted data is generated based on an encryption of the key derivation seed using an asymmetric encryption key. The encrypted data is provided in response to the request.

Abstract: A processing device receives, from a host system, a key manifest and a digital signature generated based on the key manifest using a private key corresponding to a public/private key pair. The key manifest comprises one or more verification keys. The digital signature is verified using the public key and the processing device stores the key manifest in a persistent storage component in response to successful verification of the digital signature. The one or more verification keys are utilized in one or more verification operations based on the key manifest being stored in the persistent memory component.

Abstract: A request for memory sub-system log data is received from a host system. In response to receiving the request, a symmetric encryption key for encrypting the requested memory-sub-system log data is generated. The requested memory sub-system log data is encrypted using the symmetric encryption key. The symmetric encryption key is encrypted using an asymmetric encryption key. An encrypted data payload is generated and sent to the host system in response to the request. The encrypted data payload comprises the encrypted encryption key and the encrypted memory sub-system log data.

Abstract: A method by which a pair of communicating network equipment drivers can determine if the equipment they control such as a network adapter or a switch port are directly connected by a single network cable, is applicable to network protocols which include a link active signaling technique as part of the physical layer specification. The method includes determining whether the link is in a first state in which there is only one device coupled to the link without intervening devices which are members of a particular class, or in a second state in which there may be more than one device coupled to the link without intervening devices which are members of the particular class. If the link is in the first state, then a physical layer test involving the physical layer link active signaling mechanism is executed to ensure that the responding device is coupled to the same link without intervening devices that are not members of the particular class.