# US 2019/0245682 A1 · Facilitating Communications using Hybrid Cryptography

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2019/0245682 A1
- Document ID: US20190245682A1
- Status: Published application
- Kind: A1
- Application number: 15/889,343
- Filed: 2018-02-06
- Published: 2019-08-08
- Earliest claimed: 2018-02-06
- Assignees: Wickr Inc.
- Applicants: Wickr Inc.
- Inventors: Joël Alwen
- Web page: https://patentgrep.com/patent/US20190245682A1

## CPC

- H04L 9/085: {Secret sharing or secret splitting, e.g. threshold schemes}
- H04L 9/0822: {using key encryption key}
- H04L 9/0844: {with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys}
- H04L 9/0861: {Generation of secret information including derivation or calculation of cryptographic keys or passwords}
- H04L 9/16: the keys or algorithms being changed during operation
- H04L 9/3247: {involving digital signatures}
- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

The present application describes a method, system, and non-transitory computer-readable medium for exchanging encrypted communications using hybrid encryption. According to the present disclosure, a first device receives an encrypted communication from a second device. The encrypted communication includes a first encrypted secret, a second encrypted secret, a first signature, and a second signature. The first device verifies the first signature and the second signature, and, when the first and second signatures are valid, decrypts the first encrypted secret using a first encryption algorithm and the second encrypted secret using a second encryption algorithm. The first device combines the first decrypted secret and the second decrypted secret to recover a first communication and provides the first communication to a user of the first device.

## Claims

### Claim 1

A method receiving and decrypting an encrypted communication, the method comprising:
receiving, at a first device, an encrypted communication from a second device, wherein the encrypted communication includes a first encrypted secret, a second encrypted secret, a first signature, and a second signature;
verifying, by the first device, the first signature and the second signature;
when the first and second signatures are valid, decrypting, by the first device, the first encrypted secret using a first encryption algorithm and the second encrypted secret using a second encryption algorithm; and
combining, by the first device, the first decrypted secret and the second decrypted secret to recover a first communication.

### Claim 2 (depends on 1)

The method of claim 1, wherein the first communication is selected from the group consisting of: a text message, an SMS message, an MMS message, a video message, a file transfer, a voice recording, a voice memo, and a GIF.

### Claim 3 (depends on 1)

The method of claim 1, wherein the first communication is an encryption key.

### Claim 4 (depends on 1)

The method of claim 1, further comprising:
providing the first communication to a user of the first device.

### Claim 5 (depends on 1)

The method of claim 1, wherein decrypting the first secret comprises:
deriving, by the first device, a first key-encrypting key using, at least in part, a first set of keys generated according to a first key derivation algorithm;
decrypting, by the first device, a first encrypted communication key using the first key-encrypting key; and
decrypting, by the first device, the first encrypted secret using the first decrypted communication key.

### Claim 6 (depends on 5)

The method of claim 5, wherein decrypting the first secret comprises:
deriving, by the first device, a second key-encrypting key using, at least in part, second set of keys generated according to a second key derivation algorithm;
decrypting, by the first device, a second encrypted communication key using the second key-encrypting key; and
decrypting, by the first device, the second encrypted secret using the second decrypted communication key.

### Claim 7 (depends on 1)

The method of claim 1, wherein verifying the first signature comprises:
verifying, by the first device, the first signature with a first public key associated with the second device.

### Claim 8 (depends on 7)

The method of claim 7, wherein verifying the second signature comprises:
verifying, by the first device, the second signature with a second public key associated with the second device.

### Claim 9

A system, comprising:
an interface configured receive an encrypted communication from a second device, wherein the encrypted communication includes a first encrypted secret, a second encrypted secret, a first signature, and a second signature;
a processor configured to verify the first signature and the second signature, decrypt the first encrypted secret using a first encryption algorithm and the second encrypted secret using a second encryption algorithm when the first and second signatures are valid, and combine the first decrypted secret and the second decrypted secret to recover a first communication; and
a memory configured to store data and instructions for the processor to recover the first communication.

### Claim 10 (depends on 9)

The system of claim 9, further comprising:
an output unit configured to provide the first communication to a user of the system.

### Claim 11 (depends on 9)

The system of claim 9, wherein the first communication is an encryption key.

### Claim 12 (depends on 9)

The system of claim 9, wherein the processor is further configured to combine the first decrypted secret and the second decrypted secret according to a secret sharing algorithm.

### Claim 13

A non-transitory computer-readable medium comprising instructions that when, executed by at least one processor, perform the steps of:
receiving, at a first device, an encrypted communication from a second device, wherein the encrypted communication includes a first encrypted secret, a second encrypted secret, a first signature, and a second signature;
verifying, by the first device, the first signature and the second signature;
when the first and second signatures are valid, decrypting, by the first device, the first encrypted secret using a first encryption algorithm and the second encrypted secret using a second encryption algorithm; and
combining, by the first device, the first decrypted secret and the second decrypted secret to recover a first communication.

### Claim 14 (depends on 13)

The non-transitory computer-readable medium of claim 13, wherein the first communication is an encryption key.

### Claim 15 (depends on 13)

The non-transitory computer-readable medium of claim 13, further comprising instructions for:
providing the first communication to a user of the first device.

### Claim 16 (depends on 13)

The non-transitory computer-readable medium of claim 13, wherein decrypting the first secret includes instructions for:
deriving, by the first device, a first key-encrypting key using, at least in part, a first set of keys generated according to a first key derivation algorithm;
decrypting, by the first device, a first encrypted communication key using the first key-encrypting key; and
decrypting, by the first device, the first encrypted secret using the first decrypted communication key.

### Claim 17 (depends on 16)

The non-transitory computer-readable medium of claim 16, wherein decrypting the first secret includes instructions for:
deriving, by the first device, a second key-encrypting key using, at least in part, second set of keys generated according to a second key derivation algorithm;
decrypting, by the first device, a second encrypted communication key using the second key-encrypting key; and
decrypting, by the first device, the second encrypted secret using the second decrypted communication key.

### Claim 18 (depends on 13)

The non-transitory computer-readable medium of claim 13, wherein verifying the first signature comprises instructions for:
verifying, by the first device, the first signature with a first public key associated with the second device.

### Claim 19 (depends on 18)

The non-transitory computer-readable medium of claim 18, wherein verifying the second signature comprises instructions for:
verifying, by the first device, the second signature with a second public key associated with the second device.