Key encryption key wrapping

A method of decryption comprising:

• recovering a policy object using a private key corresponding to a print apparatus, the policy object including a wrapped key;
• generating a key encryption key using user-associated information;
• unwrapping the wrapped key using the key encryption key to recover a content encryption key;
• and
• decrypting an encrypted electronic document using the content encryption key.

A non-transitory computer-readable storage medium comprising a set of instructions executable by a processor resource to:

• generate a key encryption key from policy-associated data;
• encrypt a content encryption key using the key encryption key to generate a wrapped key;
• generate a policy object, the policy object including the wrapped key;
• encrypt the policy object with a policy encryption key;
• and
• encrypt the policy encryption key using a public key of a print apparatus.

A print apparatus comprising:

• a display engine including circuitry and processor executable instructions to cause a control panel to display a user information request;
• a decryption engine including circuitry and processor executable instructions to:
• decrypt a key cipher using a private key corresponding to the print apparatus to recover a policy encryption key;
• decrypt a policy cipher using the policy encryption key to recover a policy object, the policy object including a wrapped key;
• unwrap the wrapped key using a key encryption key generated from user provided information to recover a content encryption key;
• and
• decrypt an encrypted electronic document using the content encryption key;
• and
• a print engine including circuitry and processor executable instructions to:
• operate the print apparatus according to a rule of the policy object;
• and
• print the decrypted electronic document when the rule of the policy object is satisfied.