Contextual key management for data encryption

At least one non-transitory computer readable medium comprising instructions to cause at least one processor circuit to at least:

• identify, based on a data structure, a first combination of context rules associated with a first cryptographic key, the first cryptographic key associated with encrypted data, the data structure to map respective ones of a plurality of cryptographic keys to respective combinations of context rules, the plurality of cryptographic keys including the first cryptographic key;
• discover context information associated with the first combination of context rules, at least a portion of the context information based on a request to access the encrypted data;
• and
• evaluate the first combination of context rules based on the context information to validate the request.

A method comprising:

• accessing, by at least one processor circuit programmed by at least one instruction, a data structure to determine a first combination of context rules associated with a first cryptographic key, the first cryptographic key associated with encrypted data, the data structure to map respective ones of a plurality of cryptographic keys to respective combinations of context rules, the plurality of cryptographic keys including the first cryptographic key;
• determining whether a request to access the encrypted data is valid based on the first combination of context rules;
• and
• decrypting the encrypted data after a determination that the request is valid.