Method of using symmetric cryptography for both data encryption and sign-on authentication
Embodiments herein provide, for example, a method that includes downloading a symmetrically encrypted data block from a server, where the encrypted data block comprises a server-stored secondary password; decrypting the encrypted data block with a shared-symmetric key; signing onto at least one of a server or service using the server-stored secondary password; generating a secondary password, where the generated secondary password is different than the server-stored secondary password; and overwriting the server-stored secondary password with the generated secondary password.
1. A method executed by a client computing device, comprising:
downloading, by the client computing device, a symmetrically encrypted data block from a server, wherein the encrypted data block comprises a server-stored password;
decrypting, by the client computing device, the downloaded encrypted data block with a shared-symmetric key;
signing, by the client computing device, onto at least one of a server or service using the server-stored password;
generating a secondary password after signing, by the client computing device, onto at least one of a server or service using the server-stored password, wherein the generated secondary password is different than the server-stored password; and
overwriting the server-stored password with the generated secondary password after the client computing device has downloaded the symmetrically encrypted data block from the server.
2. The method of claim 1 , wherein the server generates the secondary password.
3. The method of claim 2 , wherein the server generating the secondary password comprises the server generating a random password.
4. The method of claim 1 , further comprising:
encrypting a client-encrypted data block that includes the generated secondary password; and
transmitting the client-encrypted data block to the server, wherein the server decrypts the client-encrypted data block and overwrites the server-stored password with the generated secondary password.
5. The method of claim 4 , wherein generating the secondary password comprises at least one of the client computing device generating a random password and the client computing device receiving input from a user, wherein the input includes the secondary password.
6. The method of claim 1 , wherein the server-stored password authorizes the client computing device to sign into a service.
7. The method of claim 1 , wherein the client computing device includes at least one of a mobile device, or a stationary device.