System and method for protecting secrets file

1. A method for encrypting communication, comprising:

receiving a request to communicate with a group;

obtaining a group agreed connect name corresponding to the group;

obtaining a username and password of a user of a member connecting to the group;

generating a first message digest using the group agreed connect name, the username, the password, and an n-bit generator;

extracting a secrets file name from the first message digest;

obtaining an encrypted secrets file from a secrets directory;

decrypting the encrypted secrets file to obtain a secrets file using a secrets file encryption key obtained from the first message digest;

generating a second message digest using the n-bit generator and a first secret and a second secret from the secrets file;

extracting algorithm selector bits from the second message digest;

selecting, from a plurality of encryption algorithms, an encryption algorithm corresponding to the algorithm selector bits; and

encrypting communication between the member and the group using an encryption key obtained, at least in part, from the second message digest,

wherein the communication is encrypted using the encryption algorithm.

2. The method of claim 1 , wherein the secrets directory comprises a plurality of decoy files.

3. The method of claim 2 , wherein each of the plurality of decoy files comprises decoy file contents, wherein each of the plurality of decoy files are a same size as the secrets file.

4. The method of claim 3 , wherein each of the plurality of decoy files is associated with a modification time within a range of modification times and a modification time of the secrets file is within the range of modification times.

5. The method of claim 1 , wherein the first secret is a static secret and the second secret is a dynamic secret.

6. A computing device for encrypting communication, comprising:

a processor;

a memory; and

software instructions stored in memory for causing the computing device to:

receive a request to communicate with a group;

obtain a group agreed connect name corresponding to the group;

obtain a username and password of a user of a member of the group;

generate a first message digest using the group agreed connect name, the username, the password, and an n-bit generator;

extract a secrets file name from the first message digest;

obtain an encrypted secrets file from a secrets directory;

decrypt the encrypted secrets file to obtain a secrets file using a secrets file encryption key obtained from the first message digest;

generate a second message digest using the n-bit generator and a first secret and a second secret from the secrets file;

extract algorithm selector bits from the second message digest; select, from a plurality of encryption algorithms, an encryption algorithm corresponding to the algorithm selector bits; and

encrypt communication between the member and the group using an encryption key obtained, at least in part, from the second message digest,

wherein the communication is encrypted using the encryption algorithm.

7. The computing device of claim 6 , wherein the secrets directory comprises a plurality of decoy files.

8. The computing device of claim 7 , wherein each of the plurality of decoy files comprises decoy file contents, wherein each of the plurality of decoy files are a same size as the secrets file.

9. The computing device of claim 8 , wherein each of the plurality of decoy files is associated with a modification time within a range of modification times and a modification time of the secrets file is within the range of modification times.

10. The computing device of claim 6 , wherein the first secret is a static secret and the second secret is a dynamic secret.

11. A non-transitory computer readable medium comprising computer readable program code embodied therein for causing a computer system to perform a method for encrypting communication, the method comprising:

receiving a request to communicate with a group;

obtaining a group agreed connect name corresponding to the group;

obtaining a username and password of a user of a member of the group;

generating a first message digest using the group agreed connect name, the username, the password, and an n-bit generator;

extracting a secrets file name from the first message digest;

obtaining an encrypted secrets file from a secrets directory;

decrypting the encrypted secrets file to obtain a secrets file using a secrets file encryption key obtained from the first message digest;

generating a second message digest using the n-bit generator and a first secret and a second secret from the secrets file;

extracting algorithm selector bits from the second message digest;

selecting, from a plurality of encryption algorithms, an encryption algorithm corresponding to the algorithm selector bits; and

encrypting communication between the member and the group using an encryption key obtained, at least in part, from the second message digest,

wherein the communication is encrypted using the encryption algorithm.

12. The non-transitory computer readable medium of claim 11 , wherein the secrets directory comprises a plurality of decoy files.

13. The non-transitory computer readable medium of claim 12 , wherein each of the plurality of decoy files comprises decoy file contents, wherein each of the plurality of decoy files are a same size as the secrets file.

14. The non-transitory computer readable medium of claim 12 , wherein each of the plurality of decoy files is associated with a modification time within a range of modification times and a modification time of the secrets file is within the range of modification times.

15. The non-transitory computer readable medium of claim 11 , wherein the first secret is a static secret and the second secret is a dynamic secret.