Public Key Encryption Algorithms for Hard Lock File Encryption
AssigneesCerticom Corp., BlackBerry Limited
InventorsRobert John Lambert, Daniel Richard L. Brown, Atsushi Yamada
Life of this patent
Estimating the term…
Abstract
In some aspects, an encryption method comprises encrypting a first portion of a message using a first secret key. The first secret key is generated based on the public key of an entity. A one-way function is used to generate a second secret key from the first secret key, and the first secret key is subsequently discarded. A second portion of the message is encrypted using the second secret key. The encrypted first portion of the message and the encrypted second portion of the message are provided to the entity.
Claims19
1-18. (canceled)
A method, comprising:
- receiving an encrypted message, a private key, and an ephemeral public key of an entity;
- dividing the encrypted message into a plurality of portions, wherein the plurality of portions include a first portion and a second portion;
- generating a shared secret based on the private key and the ephemeral public key;
- in response to generating the shared secret, discarding the private key and the ephemeral public key;
- generating a first decryption key based on the shared secret;
- decrypting the first portion using the first decryption key;
- generating a second decryption key based on the first decryption key;
- decrypting the second portion using the second decryption key;
- and
- outputting at least one of a decrypted first portion or a decrypted second portion.
device, comprising:
- a memory;
- and
- at least one hardware processor communicatively coupled with the memory and configured to;
- receive an encrypted message, a private key, and an ephemeral public key of an entity;
- divide the encrypted message into a plurality of portions, wherein the plurality of portions include a first portion and a second portion;
- generate a shared secret based on the private key and the ephemeral public key;
- in response to generating the shared secret, discard the private key and the ephemeral public key;
- generate a first decryption key based on the shared secret;
- decrypt the first portion using the first decryption key;
- generate a second decryption key based on the first decryption key;
- decrypt the second portion using the second decryption key;
- and
- output at least one of a decrypted first portion or a decrypted second portion.
A non-transitory computer-readable medium containing instructions which, when executed, cause a computing device to perform operations comprising:
- receiving an encrypted message, a private key, and an ephemeral public key of an entity;
- dividing the encrypted message into a plurality of portions, wherein the plurality of portions include a first portion and a second portion;
- generating a shared secret based on the private key and the ephemeral public key;
- in response to generating the shared secret, discarding the private key and the ephemeral public key;
- generating a first decryption key based on the shared secret;
- decrypting the first portion using the first decryption key;
- generating a second decryption key based on the first decryption key;
- decrypting the second portion using the second decryption key;
- and
- outputting at least one of a decrypted first portion or a decrypted second portion.
Dependencies are inferred from the claim text.