Hybrid cryptographic system and method for encrypting data

Abstract

The invention relates to a hybrid cryptographic system and method for encrypting data. A hybrid encryption method for securely transferring an electronic data package from a sender to a plurality of clients is provided. The method comprises storing a shared symmetric key on each of the clients. The sender encrypts a private key of an asymmetric key pair using the shared symmetric key. The sender encrypts the data package with a temporary symmetric key to generate an encrypted data package. The sender encrypts the temporary symmetric key with the public key of the asymmetric key pair to generate an encrypted temporary symmetric key. The sender transmits the encrypted data package, the encrypted temporary symmetric key, and the encrypted private key to the clients. Each client decrypts the encrypted data package by: using the shared symmetric key to decrypt the encrypted private key; using the decrypted private key to decrypt the encrypted temporary symmetric key, and using the decryptedtemporary symmetric key to decrypt the encrypted data package.

Description

technical field [0001] The field of the invention relates generally to encryption of electronic data for secure distribution of electronic data, and more particularly, to hybrid cryptographic systems for encrypting data packets efficiently and securely to multiple recipients Provides encryption, distribution and decryption. Background technique [0002] In order to protect the content of electronic data, encryption methods have been developed so that only authorized parties can access the data and prevent unauthorized parties from accessing the data. Typically, encryption of data entails encrypting the data into an encrypted form using a cryptographic algorithm such that the intelligible content of the data can only be accessed by first decrypting the data. Encryption of data packets can be used to protect data at rest (i.e., as stored in a data storage device), or while in transit, e.g., via a communication connection or network (e.g., private or public network (e.g., Inte...

AI Technical Summary

Problems solved by technology

However, this approach has two problems: (a) if the shared symmetric key is compromised, each client must be updated with a new shared key; and (b) the sender often uses the shared symmetric key (for transmission to the client, encrypting the packet each time), making it more likely to be compromised

But this solution cannot solve problem (a), because if the private key is compromised, each client must be updated with a new asymmetric key

Images