Cipher stream based secure packet communications with key stream transmission over diverse paths

A non-transitory computer-readable medium carrying one or more sequences of instructions, wherein execution of the one or more sequences of instructions by one or more processors causes the one or more processors to perform the steps of:

• establishing a plurality of diverse paths between a single sending node and a different single receiving node, wherein the diverse paths are different physical layer links or different virtual private network (VPN) links or some combination;
• encrypting plaintext using a first value for an encryption parameter to produce ciphertext and determining a key configured to convert the ciphertext to the plaintext;
• fragmenting at the sending node a cipher stream of cipher packets that indicates the ciphertext over at least two paths of the plurality of diverse paths;
• and
• sending a key stream of key packets that indicates the key over at least one path of the plurality of diverse paths without introducing a random bit error, wherein no particular key packet is configured to decrypt any cipher packet on a same path as the particular key packet.

A system comprising:

• at least one processor;
• a plurality of communication links;
• and
• at least one memory including one or more sequences of instructions,
• the at least one memory and the one or more sequences of instructions configured to, with the at least one processor, cause the apparatus to perform at least the following,
• establishing a plurality of diverse paths between a single sending node and a different single receiving node, wherein the diverse paths are different physical layer links or different virtual private network (VPN) links or some combination;
• encrypting plaintext at the sending node using a first value for an encryption parameter to produce ciphertext and determining a key configured to convert the ciphertext to the plaintext;
• fragmenting a cipher stream of cipher packets that indicates the ciphertext over at least two paths of the plurality of diverse paths;
• and
• sending a key stream of key packets that indicates the key over at least one path of the plurality of diverse paths without introducing a random bit error, wherein no particular key packet is configured to decrypt any cipher packet on a same path as the particular key packet.