Enhanced cryptography systems and methods

An apparatus, comprising:

• a processing circuit having a processor, a secure memory, and a second memory storing executable instructions, the executable instructions when executed by the processor cause the processing circuit to:
• maintain, in the secure memory, a first set of one or more decryption keys;
• maintain, in the second memory, a second set of one or more decryption keys encrypted using a white-box cryptography mechanism, the second set of one or more decryption keys configured to decrypt data encrypted with an encryption algorithm not supported by the white-box cryptography mechanism;
• perform one or more anti-tampering verifications to detect tampering events for tampering with the apparatus or an application installed on the apparatus;
• upon determining that a tampering event is detected,
• preventing execution of the application or preventing access to decrypted cryptography keys;
• and
• upon determining that no tampering event is detected,
• decrypt, within the secure memory, the second set of one or more decryption keys using the white-box cryptography mechanism and the first set of one or more decryption keys;
• and
• provide access to the decrypted second set of one or more decryption keys to decrypt the data encrypted with the encryption algorithm not supported by the white-box cryptography mechanism.

A non-transitory computer-readable storage medium including computer code instructions stored thereon, the computer code instructions when executed by a processor cause the processor to perform operations comprising:

• maintaining, in a secure memory of a computing device, a first set of one or more decryption keys;
• maintaining, in a second memory of the computing device, a second set of one or more decryption keys encrypted using a white-box cryptography mechanism, the second set of one or more decryption keys configured to decrypt data encrypted with an encryption algorithm not supported by the white-box cryptography mechanism;
• performing one or more anti-tampering verifications to detect tampering events for tampering with the computing device or an application installed on the computing device;
• upon determining that a tampering event is detected,
• preventing execution of the application or preventing access to decrypted cryptography keys;
• and
• upon determining that no tampering event is detected,
• decrypting, within the secure memory, the second set of one or more decryption keys using the white-box cryptography mechanism and the first set of one or more decryption keys;
• and
• providing access to the decrypted second set of one or more decryption keys to decrypt the data encrypted with the encryption algorithm not supported by the white-box cryptography mechanism.