Runtime encryption plugin for a key management system
AssigneeFortanix, Inc.
InventorsAnand Kashyap, Ambuj Kumar, Jethro Gideon Beekman, Jeffrey Seyfried
Life of this patent
Estimating the term…
Abstract
A request may be received from an application for a performance of an operation associated with a cryptographic key that is stored at a secure enclave. A plugin of the secure enclave may be identified from the request for performance of the operation. The operation associated with the cryptographic key may be performed by using the plugin of the secure enclave to generate an output within the secure enclave. The output generated within the secure enclave and based on the plugin may be provided to the application.
Claims20
A method comprising:
- receiving a request from an application for a performance of an operation associated with a cryptographic key that is stored at a secure enclave;
- identifying, by a processing device, a plugin of the secure enclave specified by the request for performance of the operation;
- performing the operation associated with the cryptographic key by using the plugin of the secure enclave to generate an output within the secure enclave;
- and
- providing the output generated within the secure enclave and based on the plugin to the application.
A system comprising:
- a memory;
- and
- a processing device, operatively coupled with the memory, to:
- receive a request from an application for a performance of an operation associated with a cryptographic key that is stored at a secure enclave;
- identify a plugin of the secure enclave specified by the request for performance of the operation;
- perform the operation associated with the cryptographic key by using the plugin of the secure enclave to generate an output within the secure enclave;
- and
- provide the output generated within the secure enclave and based on the plugin to the application.
A non-transitory computer readable medium comprising data that, when accessed by a processing device, cause the processing device to perform operations comprising:
- receiving a request from an application for a performance of an operation associated with a cryptographic key that is stored at a secure enclave;
- identifying a plugin of the secure enclave specified by the request for performance of the operation;
- performing the operation associated with the cryptographic key by using the plugin of the secure enclave to generate an output within the secure enclave;
- and
- providing the output generated within the secure enclave and based on the plugin to the application.
Dependencies are inferred from the claim text.