Hardware memory encryption, with key randomly generated per-boot within the memory controller.