Abstract: A non-transitory computer readable storage medium has instructions executed by a processor to divide a digital file into partitions. Advanced Encryption Standard-Galois/Counter Mode (AES-CSM) encryption is used to form encrypted partitions of the partitions, where each encrypted partition has a unique Message Authentication Code (MAC). An update to a specified encrypted partition is received. AES-CSM encryption is used on the specified encrypted partition to compute a new unique MAC to form a new specified encrypted partition without processing any other encrypted partition.

Abstract: A non-transitory computer readable storage medium has instructions executed by a processor to define a parent application executing on a secure runtime hardware resource. A state snapshot of the secure runtime hardware resource is maintained. A fork request for a child application to be derived from the parent application is received. An updated state snapshot of the state snapshot is formed. The child application is instantiated. Encrypted state is transferred from the parent application to the child application. The encrypted state is used to derive an encryption key shared by the parent application and the child application. The encrypted state in the child application is decrypted using the encryption key to spawn an independent child application operative as an additional secure runtime instance. The parent application on the secure runtime hardware resource and the child application operative as the additional secure runtime instance are executed independently.