The present invention is a method, apparatus, and system to generate a key
hierarchy for use in an isolated execution environment of a protected
platform. In order to bind secrets to particular code operating in
isolated execution, a key hierarchy comprising a series of symmetric keys
for a standard symmetric cipher is utilized. The protected platform
includes a processor that is configured in one of a normal execution mode
and an isolated execution mode. A key storage stores an initial key that
is unique for the platform. A cipher key creator located in the protected
platform creates the hierarchy of keys based upon the initial key. The
cipher key creator creates a series of symmetric cipher keys to protect
the secrets of loaded software code.
