Abstract: In various examples, a technique for verifying data integrity is disclosed that includes receiving a request to access a data block of a plurality of data blocks stored in a non-secure memory. The technique further includes identifying, in a secure memory, an authentication token associated with the data block. The technique also includes generating an updated authentication token based on the data block. The technique further includes determining whether the updated authentication token corresponds to the identified authentication token stored in the secure memory. The technique still further includes in response to determining that the updated authentication token corresponds to the identified authentication token stored in the secure memory, performing one or more operations using the data block.

Abstract: In various examples, a technique for securely transmitting CAN (Controller Area Network) messages is disclosed that includes receiving, using a cryptographic engine, a message from an application to be transmitted over a CAN (Controller Area Network) bus, wherein the cryptographic engine executes a secure firmware and is implemented on an on-die discrete processor. The technique further includes accessing, using the secure firmware, a key from a plurality of keys associated with an authentication process from a secure memory associated with the cryptographic engine. Additionally, the technique includes computing an authentication tag using the key and the message and transmitting the message with the authentication tag over the CAN bus to a destination address.

Abstract: Embodiments of the present disclosure relate to a method of encrypting a secret storage structure. The method may include storing a secret in a secret storage structure. The secret storage structure may be encrypted by encrypting the secret using a wrap key that is generated based at least on a hardware-based root key and a first context. The secret storage structure may additionally be encrypted by encrypting the secret storage structure using an authentication key that is generated based at least on the hardware-based root key and a second context.

Abstract: A system and method of data extraction is disclosed. An image file of a scan of a printed information list is received at a server via a network connection. When not in portable document format, the received image file is processed with an optical character recognition (OCR) engine at the server to identify all text therein and then the processed image file is stored in a memory. When in portable document format, the image file is processed using metadata and positional data at the server to generate sentences; process the sentences to identify prices, descriptions, items, and categories; link each identified item to an associated price, description, and category; and extract and link all modifiers from identified description, and then all identified and extracted information is stored in memory. A user interface is provided to a user via the server for graphically visualizing and editing a stored processed file.