Abstract: A method, a computer program product and a memory control unit operate to store encrypted data in a memory. In response to receiving a memory write command having write data and a memory address, a determination is made if a corresponding region of the memory is specified to store encrypted data. If the corresponding region of the memory is specified to store encrypted data, the method and computer program product retrieve an encryption key predefined for use with the received memory address and retrieve a write counter associated with the write data, increment a value of the write counter, construct data so as to include at least a portion of the memory address, a current value of the write counter and a fill pattern, and apply the constructed data to a first input of an encryption algorithm and apply the retrieved encryption key to a second input of the encryption algorithm.

Abstract: An electrical circuit includes a first interface for coupling to a data processor bus; a second interface for coupling to a memory; at least one data encryption engine and storage for storing a data structure specifying, for individual ones of a plurality of partitions of the memory, whether use of the at least one encryption engine for data read operations and data write operations is enabled for the associated partition and, if it is, information descriptive of at least one input to the encryption engine for that partition, comprising information related to a plurality of counters individual ones of which count write operations to an individual one of a plurality of data units storable in that partition.