Facilitating communications using hybrid cryptography
The present application describes a method, system, and non-transitory computer-readable medium for exchanging encrypted communications using hybrid cryptography protocol. According to the present disclosure, a first device divides a first communication into at least a first secret and a second secret. The first device encrypts the first secret using a first cipher suite and the second secret using a second cipher suite. The first device generates a first signature of the first encrypted secret and the second encrypted secret according to a first signature generation algorithm associated with the first cipher suite and a second signature of the first encrypted secret and the second encrypted secret according to a second signature generation algorithm associated with the second cipher suite. The first device transmits the first encrypted secret and the second encrypted secret, the first signature, and the second signature to the second device.
1. A method for transmitting an encrypted communication, the method comprising:
dividing, by a first device, a first communication into at least a first secret and a second secret;
encrypting, by the first device, the first secret using a first cipher suite to produce a first encrypted secret;
encrypting, by the first device, the second secret using a second cipher suite to produce a second encrypted secret;
generating, by the first device, a first signature of the first encrypted secret and the second encrypted secret according to a first signature generation algorithm associated with the first cipher suite;
generating, by the first device, a second signature of the first encrypted secret and the second encrypted secret according to a second signature generation algorithm associated with the second cipher suite; and
transmitting, from the first device, the first encrypted secret, the second encrypted secret, the first signature, and the second signature to a second device.
2. The method of claim 1 , wherein the first communication is selected from the group consisting of: a text message, an SMS message, an MMS message, a video message, a file transfer, a voice recording, a voice memo, and a GIF.
3. The method of claim 1 , wherein the first communication is an encryption key.
4. The method of claim 1 , wherein the first cipher suite is associated with the first device and the second cipher suite is associated with the second device.
5. The method of claim 1 , wherein the first cipher suite and the second cipher suite are associated with the first device.
6. The method of claim 5 , wherein the second cipher suite is a post-quantum secure cipher suite.
7. The method of claim 1 , wherein dividing the first communication comprises:
generating, by the first device, the first secret and the second secret according to a secret sharing algorithm.
8. The method of claim 1 , wherein encrypting the first secret comprises:
encrypting, by the first device, the first secret with a first communication key;
deriving, by the first device, a first key-encrypting key using, at least in part, a first set of keys generated according to a first key derivation algorithm;
encrypting, by the first device, the first communication key with the first key-encrypting; and
transmitting the encrypted first communication key to the second device with the first encrypted secret and the second encrypted secret.
9. The method of claim 8 , wherein encrypting the second secret comprises:
encrypting, by the first device, the second secret with a second communication key;
deriving, by the first device, a second key-encrypting key using, at least in part, a second set of keys generated according to a second key derivation algorithm;
encrypting, by the first device, the second communication key with the second key-encrypting; and
transmitting the encrypted second communication key to the second device with the first encrypted secret and the second encrypted secret.
10. A system comprising:
an interface configured to transmit a first encrypted secret, a second encrypted secret, a first signature, and a second signature;
a processor configured to divide a first communication into at least a first secret and a second secret, encrypt the first secret using a first cipher suite to produce the first encrypted secret, encrypt the second secret using a second cipher suite to produce the second encrypted secret, generate the first signature of the first encrypted secret and the second encrypted secret according to a first signature generation algorithm associated with the first cipher suite, and generate the second signature of the first encrypted secret and the second encrypted secret according to a second signature generation algorithm associated with the second cipher suite; and
a memory configured to store data and instructions for the processor to encrypt the first communication.
11. The system of claim 10 , wherein the first communication is an encryption key.
12. The system of claim 10 , wherein the first cipher suite is associated with a first device and the second cipher suite is associated with the second device.
13. The system of claim 12 , wherein the second cipher suite is a post-quantum secure cipher suite.
14. The system of claim 10 , wherein the processor is further configured to divide the first communication into the first secret and the second secret using a secret sharing algorithm.
15. A non-transitory computer-readable medium comprising instructions that when, executed by at least one processor, perform the steps of:
dividing, by a first device, a first communication into at least a first secret and a second secret;
encrypting, by the first device, the first secret using a first cipher suite to produce a first encrypted secret;
encrypting, by the first device, the second secret using a second cipher suite to produce a second encrypted secret;
generating, by the first device, a first signature of the first encrypted secret and the second encrypted secret according to a first signature generation algorithm associated with the first cipher suite;
generating, by the first device, a second signature of the first encrypted secret and the second encrypted secret according to a second signature generation algorithm associated with the second cipher suite; and
transmitting, from the first device, the first encrypted secret, the second encrypted secret, the first signature and the second signature to a second device.
16. The non-transitory computer-readable medium of claim 15 , wherein the first communication is an encryption key.
17. The non-transitory computer-readable medium of claim 15 , wherein the first cipher suite is associated with the first device and the second cipher suite is associated with the second device.
18. The non-transitory computer-readable medium of claim 15 , wherein the first cipher suite and the second cipher suite are associated with the first device.
19. The non-transitory computer-readable medium of claim 18 , wherein the second cipher suite is a post-quantum secure cipher suite.
20. The non-transitory computer-readable medium of claim 15 , wherein dividing the first communication includes instructions for: generating, by the first device, the first secret and the second secret according to a secret sharing algorithm.