End to end file-sharing schema using signed Merkle tree randomly originated keys

A non-transitory machine-readable medium comprising instructions that when executed by a processor execute a process for transmitting a file from a sender device to a receiver device comprising:

• generating a random symmetric session key for the sender device;
• randomly selecting a private ephemeral key for the sender device, the private ephemeral key associated with a corresponding first public key;
• wherein the receiver device comprises a randomly selected public ephemeral key, the public ephemeral key associated with a corresponding first private key;
• generating a random value within a range;
• calculating an encrypted session key;
• encrypting the file using symmetric encryption;
• and
• transmitting from the sender device to the receiver device a group ID, the encrypted session key, the random value, a sender device ID, a receiver device ID, a hashed file ID, a sender key ID, and a receiver key ID, wherein the receiver device includes a record comprising the random value, the sender device ID, the hashed file ID, and the group ID;
• wherein the sender device comprises a first public X509 certificate comprising a second public key and a corresponding second private key that is signed by a service provider;
• wherein the receiver device comprises a second public X509 certificate comprising a third public key and a corresponding third private key,
• wherein the symmetric encryption comprises AES-GSM with a key derived from the random symmetric session key;
• and comprising instructions for:
• initializing a first chainkey with the random symmetric session key as chainkey=HMAC_SHA256 (the random symmetric session key, the sender device ID);
• creating a file encryption key by concatenating the first chainkey with a name of the file;
• and
• encrypting the file with the AES-GSM and a second chainkey=HMAC_SHA256 (the encrypted session key, the sender device ID).

A system comprising:

• a computer processor;
• and
• a computer memory coupled to the computer processor;
• wherein the computer processor and the computer memory are operable for:
• generating a random symmetric session key for the sender device;
• randomly selecting a private ephemeral key for the sender device, the private ephemeral key associated with a corresponding first public key;
• wherein the receiver device comprises a randomly selected public ephemeral key, the public ephemeral key associated with a corresponding first private key;
• generating a random value within a range;
• calculating an encrypted session key;
• encrypting the file using symmetric encryption;
• and
• transmitting from the sender device to the receiver device a group ID, the encrypted session key, the random value, a sender device ID, a receiver device ID, a hashed file ID, a sender key ID, and a receiver key ID, wherein the receiver device includes a record comprising the random value, the sender device ID, the hashed file ID, and the group ID;
• wherein the sender device comprises a first public X509 certificate comprising a second public key and a corresponding second private key that is signed by a service provider;
• wherein the receiver device comprises a second public X509 certificate comprising a third public key and a corresponding third private key;
• and
• wherein the random symmetric session key and the private ephemeral key are selected from a pool of keys, the random symmetric session key and the private ephemeral key are removed from further usage after being selected, and wherein the pool of keys is replenished after all random symmetric session keys and all private ephemeral keys are selected.