Systems and methods for ensuring ephemerality of encryption keys

A computing device, comprising:

• a processor having a secure portion and an unsecure portion, wherein the processor is configured to:
• recognize that a power-on transition is from a quick boot;
• generate, in the secure portion, a new ephemeral key for use in wrapping one or more encryption keys of a key ring for use in the unsecure portion in response to the quick boot
• generate, in the secure portion of the processor, a prior ephemeral key from a stored seed on the computing device;
• unwrap, in the secure portion of the processor, each of the one or more encryption keys of the key ring with the prior ephemeral key;
• wrap, in the secure portion of the processor, each of the one or more encryption keys individually with the new ephemeral key;
• and
• write the wrapped one or more encryption keys back to the unsecure portion of the processor.

A processor for use in a computing device, the processor having a secure portion and an unsecure portion, wherein the processor is configured to:

• recognize that a power-on transition is from a quick boot;
• generate, in the secure portion, a new ephemeral key for use in wrapping one or more encryption keys of a key ring for use in the unsecure portion in response to the quick boot
• generate, in the secure portion of the processor, a prior ephemeral key from a stored seed on the computing device;
• unwrap, in the secure portion of the processor, each of the one or more encryption keys of the key ring with the prior ephemeral key;
• wrap, in the secure portion of the processor, each of the one or more encryption keys individually with the new ephemeral key;
• and
• write the wrapped one or more encryption keys back to the unsecure portion of the processor.

A computing device, comprising:

• means for recognizing that a power-on transition is from a quick boot;
• means for generating a new ephemeral key in a secure portion for use in wrapping one or more encryption keys of a key ring for use in an unsecure portion in response to the quick boot;
• means for generating, in the secure portion of the processor, a prior ephemeral key from a stored seed on the computing device;
• means for unwrapping, in the secure portion of the processor, each of the one or more encryption keys of the key ring with the prior ephemeral key;
• means for wrapping, in the secure portion of the processor, each of the one or more encryption keys individually with the new ephemeral key;
• and
• means for writing the wrapped one or more encryption keys back to the unsecure portion of the processor.