Key transport in authentication or cryptography

An apparatus, comprising:

• a data storage medium storing:
• a key encrypting key;
• a plaintext message to be authenticated, encrypted, and transmitted;
• an associated data to be authenticated and transmitted, but not encrypted;
• logic configured to generate:
• a data key in a uniformly random or pseudorandom manner;
• a nonce that is either unique for any particular value of the data key or zero-length;
• a ciphertext message, wherein the ciphertext message is at least as long as the plaintext message and is determined from at least the plaintext message, the data key, and the nonce;
• an encrypted data key, wherein the encrypted data key is derived from at least the data key and the key encrypting key;
• logic configured to generate the communication comprising at least the encrypted data key, the ciphertext message and the associated data.

A computer-readable storage medium storing one or more sequences of instructions which, when executed by one or more processors, cause performing:

• selecting a plaintext message to be authenticated, encrypted and transmitted;
• selecting an associated data to be authenticated and transmitted, but not encrypted;
• creating and storing a data key to encrypt the plaintext message in a uniformly random or pseudorandom manner;
• creating and storing a ciphertext message, wherein the ciphertext message is at least as long as the plaintext message and is derived from at least the plaintext message and the data key;
• creating and storing an encrypted data key, wherein the encrypted data key is derived from at least the data key, and a key encrypting key;
• generating a communication comprising at least the encrypted data key, the ciphertext message, and the associated data;
• wherein each of the above steps is performed by one or more processors.