An apparatus comprises: an encryption circuit in a hardware processor (102, 122) of a first computer system to encrypt data; a capability register (106, 126) of the first computer system comprising a first field to indicate the encryption circuit to support an address independent encryption mode and a second field to indicate the encryption circuit to support a software supplied offset based encryption mode a memory controller circuit (116, 136), of the first computer system, comprising a port to couple to a network interface controller circuit; a direct memory access engine circuit (116A, 136A) of the first computer system to access a memory (120-0, 120-1) in the first computer system; and the hardware processor to, for a request to perform a live migration of a virtual machine (302, 304) from the first computer system to a second computer system via the network interface controller circuit: encrypt code and data of the virtual machine from the memory with an encryption key by the encryption circuit of the hardware processor as indicated in the capability register, store the encrypted code and data of the virtual machine within a migration buffer of the memory of the first computer system by the direct memory access engine circuit, and cause the network interface controller circuit to send the encrypted code and data of the virtual machine from the migration buffer to the second computer system via the network interface controller circuit; wherein the hardware processor is to cause the network interface controller circuit to send the encrypted code and data of the virtual machine from the migration buffer to the second computer system via a remote direct memory access engine circuit of the network interface controller circuit. an encryption circuit in a hardware processor (102, 122) of a first computer system to encrypt data; a capability register (106, 126) of the first computer system comprising a first field to indicate the encryption circuit to support an address independent encryption mode and a second field to indicate the encryption circuit to support a software supplied offset based encryption mode a memory controller circuit (116, 136), of the first computer system, comprising a port to couple to a network interface controller circuit; a direct memory access engine circuit (116A, 136A) of the first computer system to access a memory (120-0, 120-1) in the first computer system; and the hardware processor to, for a request to perform a live migration of a virtual machine (302, 304) from the first computer system to a second computer system via the network interface controller circuit: encrypt code and data of the virtual machine from the memory with an encryption key by the encryption circuit of the hardware processor as indicated in the capability register, store the encrypted code and data of the virtual machine within a migration buffer of the memory of the first computer system by the direct memory access engine circuit, and cause the network interface controller circuit to send the encrypted code and data of the virtual machine from the migration buffer to the second computer system via the network interface controller circuit; wherein the hardware processor is to cause the network interface controller circuit to send the encrypted code and data of the virtual machine from the migration buffer to the second computer system via a remote direct memory access engine circuit of the network interface controller circuit. encrypt code and data of the virtual machine from the memory with an encryption key by the encryption circuit of the hardware processor as indicated in the capability register, store the encrypted code and data of the virtual machine within a migration buffer of the memory of the first computer system by the direct memory access engine circuit, and cause the network interface controller circuit to send the encrypted code and data of the virtual machine from the migration buffer to the second computer system via the network interface controller circuit; wherein the hardware processor is to cause the network interface controller circuit to send the encrypted code and data of the virtual machine from the migration buffer to the second computer system via a remote direct memory access engine circuit of the network interface controller circuit.