Data protection and recovery systems and methods

A system comprising a first non-transitory computer-readable medium storing a first program and a second non-transitory computer-readable medium storing a second program, the first program and second program including instructions that, when executed by one or more processors, execute a method of securely replacing a first data value with a second data value, the method comprising:

• generating a first public key and a first private key;
• generating a cryptographic seed value;
• passing the cryptographic seed value through an elliptic curve to generate a second public key and a second private key;
• combining the first public key with the second private key using public key cryptography to create a shared encryption key;
• passing the shared encryption key through a symmetric algorithm to encrypt the cryptographic seed value;
• sending the encrypted cryptographic seed value and the second public key through a communications interface from the first non-transitory computer-readable medium to the second non-transitory computer-readable medium;
• receiving the encrypted cryptographic seed value and the second public key on the second non-transitory computer-readable medium;
• using the second public key and the first private key, generating a second shared key to decrypt the encrypted cryptographic seed value and to generate a decrypted cryptographic seed value;
• receiving the decrypted cryptographic seed value from the second non-transitory computer-readable medium on the first non-transitory computer-readable medium;
• passing the decrypted cryptographic seed value through an elliptic curve to re-generate the second private key;
• and
• using the re-generated second private key, cryptographically signing the second data value.