Agile cryptographic deployment service

A method for securely communicating a message comprising performing, by a server computer:

• receiving, from a computer system, a message packet comprising an encrypted message and a computer system identifier, wherein the encrypted message is encrypted using a session key, the session key generated by the computer system using a key derivation function and one or more shared secrets generated using one or more cryptographic software modules;
• identifying a server computer protocol file based on the computer system identifier;
• generating one or more shared secrets corresponding to the server computer protocol file;
• generating the session key using the key derivation function and the one or more shared secrets;
• decrypting the encrypted message using the session key to obtain the message;
• and
• subsequent to obtaining the message, transmitting, to the computer system, an additional cryptographic software module, wherein the additional cryptographic software module includes a digital signature, and wherein the computer system is configured to:
• verify the additional cryptographic software module by verifying the digital signature using a public key corresponding to the server computer, a certificate authority, or a trusted execution environment device manufacturer, and
• add the additional cryptographic software module to a cryptographic software module library.

A computer system comprising:

• a processor;
• and
• a non-transitory computer readable medium coupled to the processor, the non-transitory computer readable medium comprising code, executable by the processor for implementing a method for securely communicating a message, the method comprising:
• identifying one or more cryptographic software modules based on a computer system protocol file, wherein the one or more cryptographic software modules are a subset of a cryptographic software module library stored on the computer system;
• generating one or more shared secrets corresponding to the one or more cryptographic software modules;
• generating a session key using a key derivation function and the one or more shared secrets;
• encrypting the message using the session key to generate an encrypted message;
• transmitting a message packet comprising the encrypted message and a computer system identifier to a server computer, wherein the server computer is configured to use the computer system identifier to identify a server computer protocol file, generate the one or more shared secrets, generate the session key, and decrypt the encrypted message;
• subsequent to transmitting the message packet, updating the computer system protocol file to identify an additional cryptographic software module in addition to the one or more cryptographic software modules;
• and
• transmitting a protocol update message to the server computer, the protocol update message indicating that the computer system protocol file has been updated, wherein the protocol update message comprises the computer system identifier for use by the server computer in identifying the server computer protocol file to be updated.