Lightweight encrypted communication protocol

A computer-implemented method performed by a networked device, comprising:

• generating a first cryptographic key from a first shared secret obtained by performing a key-exchange process over a network with a network entity;
• generating a first key-exchange solution from a first set of key-exchange parameters received from the network entity;
• generating a second set of key-exchange parameters;
• sending a first message to the network entity, the first message encrypted with the first cryptographic key, the first message including a first message payload, the first key-exchange solution, and the second set of key-exchange parameters;
• and
• generating a second cryptographic key from a second shared secret derived from the first set of key-exchange parameters and the first key-exchange solution.

A system, comprising at least one computing device that includes one or more processors and a physical memory containing instructions that, when executed by the one or more processors causes the system to:

• generate a first cryptographic key from a first shared secret acquired by performing a key-exchange process over a network with a network entity;
• generate a first key-exchange solution from a first set of key-exchange parameters received from the network entity;
• generate a second set of key-exchange parameters;
• send a first message to the network entity, the first message encrypted with the first cryptographic key, the first message including a first message payload, the first key-exchange solution, and the second set of key-exchange parameters;
• and
• generate a second cryptographic key from a second shared secret derived from the first set of key-exchange parameters and the first key-exchange solution.