System and method for secure key management for encrypted core dump

A method implemented by at least one processor of a remote key server for decrypting a core dump, the method comprising:

• receiving, from a decryptor, crash metadata that includes at least one device public key;
• obtaining a server private key from a key store and a device public key from the crash metadata;
• regenerating a symmetric key based on the server private key and the device public key;
• and
• transmitting, to the decryptor, the regenerated symmetric key for decrypting the core dump based on the regenerated symmetric key.

A method implemented by at least one processor of an encryptor for encryption of a core dump at an electronic device, the method comprising:

• receiving a trigger including an instruction to generate the core dump based on a crash of a memory of the electronic device;
• generating the core dump based on the trigger;
• configuring a plurality of sections of the core dump for encryption;
• determining a size of the core dump based on the plurality of sections;
• determining a number of rounds for encryption based on the size of the core dump;
• generating a symmetric key based on a server public key and a device private key;
• encrypting the plurality of sections of the core dump and the symmetric key based on a specific encryption technique;
• and
• transmitting, to a decryptor, the core dump that is encrypted with the symmetric key, and core dump metadata including at least the number of rounds for encryption.

A decryptor for decrypting a core dump, the decryptor comprising:

• a processor;
• and
• a memory coupled with the processor and storing program code, the processor being configured to access the program code and execute the program code to at least:
• receive, from an encryptor of an electronic device, the core dump that has been encrypted with a symmetric key generated by the encryptor, and core dump metadata;
• extract crash metadata from the core dump metadata;
• transmit, to a remote key server, the crash metadata for regenerating the symmetric key;
• obtain, from the remote key server, a regenerated symmetric key based on the crash metadata;
• and
• decrypt the core dump based on the regenerated symmetric key and the crash metadata.

A remote key server for decrypting a core dump, the remote key server comprising:

• a key store;
• a processor;
• and
• a memory coupled with the processor and storing program code, the processor being configured to access the program code and execute the program code to at least:
• receive, from a decryptor, crash metadata including at least one device public key;
• obtain a server private key from the key store and a device public key from the crash metadata;
• regenerate a symmetric key using the server private key and the device public key;
• and
• transmit the regenerated symmetric key to the decryptor for decrypting the core dump based on the regenerated symmetric key.

An encryptor for encrypting a core dump at an electronic device, the encryptor comprising:

• a processor;
• and
• a memory coupled with the processor and storing program code, the processor being configured to access the program code and execute the program code to at least:
• receive a trigger including an instruction to generate the core dump based on a crash of a memory of the electronic device;
• generate the core dump based on the trigger;
• configure a plurality of sections of the core dump for encryption;
• determine a size of the core dump based on the plurality of sections;
• determine a number of rounds for encryption based on the size of the core dump;
• generate a symmetric key based on a server public key and a device private key;
• encrypt the plurality of sections of the core dump using the generated symmetric key based on a specific encryption technique;
• and
• transmit, to a decryptor, the core dump that is encrypted, and core dump metadata that includes at least the number of rounds for encryption.