Executing Cryptographic Operations In A Secure Element Platform Runtime Environment

One or more non-transitory computer-readable media comprising instructions, which when executed by one or more hardware processors associated with a first computing entity, cause performance of operations comprising:

• initiating a cryptography module within a secure element (SE) platform runtime environment, wherein the one or more hardware processors comprise at least one SE hardware processor, and wherein the SE platform runtime environment is executed on the at least one SE hardware processor;
• performing a set of cryptographic operations at least by executing a set of one or more SE applications within the SE platform runtime environment, wherein the set of cryptographic operations comprises:
• generating a first shared secret;
• generating a ciphertext at least by encapsulating the first shared secret with a first KEM public key associated with a second computing entity in accordance with an encapsulation algorithm;
• and
• transmitting the ciphertext to the second computing entity,
• wherein subsequent to transmitting the ciphertext to the second computing entity:
• the second computing entity derives the first shared secret by decapsulating the ciphertext with a KEM private key corresponding to the first KEM public key, and
• the first computing entity and the second computing entity exchange at least one encrypted message,
• wherein the at least one encrypted message is encrypted with an encryption key,
• wherein the encryption key comprises, or is based at least in part on, the first shared secret.

A system, comprising:

• at least one secure element (SE) hardware processor associated with a first computing entity;
• an SE platform runtime environment executable on the at least one SE hardware processor;
• wherein the SE platform runtime environment is configured to execute operations, using the at least one SE hardware processor, the operations comprising:
• performing a set of cryptographic operations at least by executing a set of one or more SE applications within the SE platform runtime environment, wherein the set of cryptographic operations comprises:
• generating a first shared secret;
• generating a ciphertext at least by encapsulating the first shared secret with a first KEM public key associated with a second computing entity in accordance with an encapsulation algorithm;
• and
• transmitting the ciphertext to the second computing entity,
• wherein subsequent to transmitting the ciphertext to the second computing entity:
• the second computing entity derives the first shared secret by decapsulating the ciphertext with a KEM private key corresponding to the first KEM public key, and
• the first computing entity and the second computing entity exchange at least one encrypted message,
• wherein the at least one encrypted message is encrypted with an encryption key,
• wherein the encryption key comprises, or is based at least in part on, the first shared secret.