Method and device for secure communications over a network using a hardware security engine

A system-on-a-chip apparatus comprising:

• a system-on-a-chip comprising a security engine having a secure memory accessible only by the security engine, the security engine to:
• generate a random nonce for initiating a request for a secure communication session with a server over a network using the nonce;
• perform a cryptographic key exchange with the server to generate a symmetric session key to encrypt messages sent to the server and decrypt messages received from the server during the secure communication session;
• store the session key in the secure memory,
• the system-on-a-chip to establish the secure communication session with the server over the network using the session key.

A method comprising:

• generating a random nonce in a security engine of a system-on-a-chip of a client device;
• initiating, using the client device, a request for a secure communication session with a server over a network, the request including the random nonce;
• performing a cryptographic key exchange, using the security engine of the system-on-a-chip, with the server to generate a symmetric session key to encrypt messages sent to the server and decrypt messages received from the server during the secure communication session;
• storing the session key in a secure memory of the security engine of the system-on-a-chip;
• and
• establishing, using the client device, the secure communication session with the server using the session key.

One or more machine-readable storage media comprising a plurality of instructions stored thereon that, in response to execution by a computing device, cause the computing device to:

• generate a random nonce in a security engine of a system-on-a-chip of the computing device;
• initiate a request for a secure communication session with a server over a network, the request including the random nonce;
• perform a cryptographic key exchange, using the security engine of the system-on-a-chip, with the server to generate a symmetric session key to encrypt messages sent to the server and decrypt messages received from the server during the secure communication session;
• store the session key in a secure memory of the security engine of the system-on-a-chip;
• and
• establish the secure communication session with the server using the session key.