Methods and systems for providing high-security cryptographic keys to mobile radios

A key-management infrastructure comprising:

• a communication interface;
• a processor;
• and
• a non-transitory data storage medium containing instructions executable by the processor for causing the key-management infrastructure to carry out a set of functions, the set of functions including:
• receiving first and second disassembly products of a high-security cryptographic key;
• and
• providing the first and second disassembly products to a mobile radio for reassembly of the high-security cryptographic key,
• wherein providing the first disassembly product to the mobile radio comprises providing the first disassembly product to the mobile radio over a local connection via a restricted-access key variable loader,
• wherein providing the second disassembly product to the mobile radio comprises:
• generating a medium-security-encrypted second disassembly product at least in part by encrypting the second disassembly product based on at least one medium-security cryptographic key;
• and
• providing the medium-security-encrypted second disassembly product to the mobile radio over an air interface.