Hash offset based key version embedding
AssigneeEntit Software LLC
InventorsTimothy ROAKE, Cheryl HE, Luther MARTIN
Life of this patent
Estimating the term…
Abstract
In some examples, with respect to hash offset based key version embedding, data that is to be encrypted may be ascertained, and a key, including a key version, that is to be used to encrypt the ascertained data may be ascertained. Encrypted data may be generated by encrypting the ascertained data based on the ascertained key, and hashed encrypted data may be generated by performing a hash operation on the encrypted data. Further, offset hashed encrypted data may be generated by embedding the key version into the hashed encrypted data, and the offset hashed encrypted data including the embedded key version may be stored.
Claims20
An apparatus comprising:
- a processor;
- and
- a non-transitory computer readable medium storing machine readable instructions that when executed by the processor cause the processor to:
- ascertain data that is to be encrypted;
- ascertain a key, including a key version, that is to be used to encrypt the ascertained data;
- generate encrypted data by encrypting the ascertained data based on the ascertained key;
- generate hashed encrypted data by performing a hash operation on the encrypted data;
- generate offset hashed encrypted data by embedding the key version into the hashed encrypted data;
- and
- store the offset hashed encrypted data including the embedded key version.
A computer implemented method comprising:
- ascertaining encrypted data;
- generating hashed encrypted data by performing a hash operation on the encrypted data;
- ascertaining offset hashed encrypted data;
- determining an offset value by subtracting the hashed encrypted data from the offset hashed encrypted data;
- validating that the offset value corresponds to a key version by determining whether the offset value is less than or equal to a specified threshold;
- in response to a determination that the offset value is less than or equal to the specified threshold, ascertaining a key corresponding to the offset value;
- and
- decrypting the encrypted data based on the ascertained key corresponding to the offset value.
A non-transitory computer readable medium having stored thereon machine readable instructions, the machine readable instructions, when executed, cause a processor to:
- ascertain a key, including a key version, that is to be used to encrypt data;
- generate encrypted data by encrypting the data based on the ascertained key;
- generate hashed encrypted data by performing a hash operation on the encrypted data;
- generate offset hashed encrypted data by adding a value of the key version to the hashed encrypted data;
- and
- store the offset hashed encrypted data including the added value of the key version.
Dependencies are inferred from the claim text.