The rise of cloud computing demands secure memory systems that ensure data confidentiality, integrity, and freshness against replay attacks. Existing schemes such as AES-XTS, AES-GCM, and AES-CTR each trade performance for security, with only AES-CTR plus Message Authentication Codes (MAC) and Merkle Trees (MT) providing full protection - at the cost of substantial counter and MT overhead. This paper introduces Secure Scattered Memory (SSM), a novel scheme that replaces counter-based encryption with polynomial-based secret sharing. Each data block is encoded into multiple cryptographically independent shares distributed across memory, inherently preventing information leakage while ensuring integrity and freshness through mathematical reconstruction properties. Implemented and synthesized in a 28 nm commercial PDK, SSM occupies 0.27 mm^2 and consumes 284.53 mW. Experiments show only 10% and 8% performance overhead over AES-XTS and AES-GCM, respectively, while outperforming Morphable Counter (MICRO 2018) by up to 40%, achieving 12% better performance than EMCC/RMCC (MICRO 2022), and exceeding COSMOS (MICRO 2025) by 3%.

翻译：云计算的发展对安全内存系统提出了更高要求，需要确保数据在面临重放攻击时的机密性、完整性和新鲜性。现有方案如 AES-XTS、AES-GCM 和 AES-CTR 均在性能与安全性之间进行权衡，其中仅 AES-CTR 结合消息认证码（MAC）和默克尔树（MT）能提供完整保护，但需承担显著的计数器与 MT 开销。本文提出安全分散内存（SSM），这是一种创新方案，采用基于多项式的秘密共享替代基于计数器的加密机制。每个数据块被编码为多个密码学独立的份额并分散存储于内存中，通过数学重构特性在本质上防止信息泄露，同时确保数据完整性与新鲜性。基于 28 nm 商用 PDK 实现与综合，SSM 面积为 0.27 mm^2，功耗为 284.53 mW。实验表明，SSM 相较于 AES-XTS 和 AES-GCM 仅分别产生 10% 和 8% 的性能开销，同时较 Morphable Counter（MICRO 2018）性能提升最高达 40%，比 EMCC/RMCC（MICRO 2022）性能提高 12%，并优于 COSMOS（MICRO 2025）方案 3%。