Locating cryptographic keys stored in a cache

A non-transitory machine readable medium having stored thereon instructions for performing a method comprising machine executable code which when executed by at least one machine, causes the machine to:

• receive a first key packet that includes a cryptographic key identifier and an encrypted cryptographic key, wherein the first key packet also includes an encrypted signing key and a key signature;
• locate a second key packet stored in a cache by using the cryptographic key identifier of the first key packet, wherein the cryptographic key identifier of the first key packet is a memory address in the cache, and the second key packet is stored at the memory address identified by the cryptographic key identifier of the first key packet;
• determine that the first key packet does not match the second key packet by comparing the encrypted cryptographic key of the first key packet with an encrypted cryptographic key of the second key packet;
• and
• in response to determining that the first key packet does not match the second key packet, (i) validate the first key packet, (ii) decrypt the encrypted cryptographic key of the first key packet to generate a decrypted cryptographic key, (iii) store the first key packet and the decrypted cryptographic key in the cache, and (iv) perform a cryptographic key operation using the decrypted cryptographic key.

A computing device comprising:

• a memory containing a machine readable medium comprising machine executable code having stored thereon instructions for performing a method of cryptographic key operations;
• a processor coupled to the memory, the processor configured to execute the machine executable code to cause the processor to:
• receive a first key packet that includes a cryptographic key identifier and an encrypted cryptographic key, wherein the first key packet also includes an encrypted signing key and a key signature;
• locate a second key packet stored in a cache by using the cryptographic key identifier of the first key packet, wherein the cryptographic key identifier of the first key packet is a memory address in the cache, and the second key packet is stored at the memory address identified by the cryptographic key identifier of the first key packet;
• determine that the first key packet does not match the second key packet by comparing the encrypted cryptographic key of the first key packet with an encrypted cryptographic key of the second key packet;
• and
• in response to determining that the first key packet does not match the second key packet, (i) validate the first key packet, (ii) decrypt the encrypted cryptographic key of the first key packet to generate a decrypted cryptographic key, (iii) store the first key packet and the decrypted cryptographic key in the cache, and (iv) perform a cryptographic key operation using the decrypted cryptographic key.