Leveraging transport-layer cryptographic material

A computer system, comprising:

• one or more processors;
• and
• memory storing instructions that, if executed by the one or more processors, cause the system to:
• establish a connection to an application on another computer system in accordance with a cryptographically protected communication protocol;
• acquire a shared secret and a session key that are produced as a result of establishing the connection in accordance with the cryptographically protected communication protocol, the shared secret accessible to the application and the system;
• derive an application-layer cryptographic key based at least in part on the shared secret;
• receive encrypted application data from the application, the encrypted application data encrypted with the application-layer cryptographic key and the session key;
• and
• acquire plain text application data by at least decrypting the encrypted application data with the session key and the application-layer cryptographic key.

A non-transitory computer-readable storage medium having stored thereon executable instructions that, as a result of being executed by one or more processors of a computer system, cause the computer system to at least:

• establish a network connection between a first application on the computer system and a second application on another computer system, the network connection being in accordance with a cryptographically protected communication protocol, the network connection having an associated session key and a shared secret;
• determine a cryptographic key based at least in part on the shared secret;
• receive encrypted application data from the second application, the encrypted application data encrypted with the cryptographic key and the session key;
• and
• acquire plain text application data by at least decrypting the encrypted application data with the session key and the cryptographic key.