Facilitating communications using hybrid cryptography
The present application describes a method, system, and non-transitory computer-readable medium for exchanging encrypted communications using hybrid encryption. According to the present disclosure, a first device receives an encrypted communication from a second device. The encrypted communication includes a first encrypted secret, a second encrypted secret, a first signature, and a second signature. The first device verifies the first signature and the second signature, and, when the first and second signatures are valid, decrypts the first encrypted secret using a first encryption algorithm and the second encrypted secret using a second encryption algorithm. The first device combines the first decrypted secret and the second decrypted secret to recover a first communication and provides the first communication to a user of the first device.
1. A method for receiving and decrypting an encrypted communication, the method comprising:
receiving, at a first device, an encrypted communication from a second device, wherein the encrypted communication includes a first encrypted secret, a second encrypted secret, a first signature, and a second signature;
verifying, by the first device, the first signature and the second signature;
based on the first and second signatures being valid:
decrypting, by the first device, the first encrypted secret using a first encryption algorithm associated with the first device;
decrypting, by the first device, the second encrypted secret using a second encryption algorithm associated with the second device; and
combining, by the first device, the first decrypted secret and the second decrypted secret to recover a first communication.
2. The method of claim 1 , wherein the first communication is selected from the group consisting of: a text message, an SMS message, an MMS message, a video message, a file transfer, a voice recording, a voice memo, and a GIF.
3. The method of claim 1 , wherein the first communication is an encryption key.
4. The method of claim 1 , further comprising: providing the first communication to a user of the first device.
5. The method of claim 1 , wherein decrypting the first secret comprises:
deriving, by the first device, a first key-encrypting key using, at least in part, a first set of keys generated according to a first key derivation algorithm;
decrypting, by the first device, a first encrypted communication key using the first key-encrypting key; and
decrypting, by the first device, the first encrypted secret using the first decrypted communication key.
6. The method of claim 5 , wherein decrypting the first secret comprises:
deriving, by the first device, a second key-encrypting key using, at least in part, second set of keys generated according to a second key derivation algorithm;
decrypting, by the first device, a second encrypted communication key using the second key-encrypting key; and
decrypting, by the first device, the second encrypted secret using the second decrypted communication key.
7. The method of claim 1 , wherein verifying the first signature comprises:
verifying, by the first device, the first signature with a first public key associated with the second device.
8. The method of claim 7 , wherein verifying the second signature comprises:
verifying, by the first device, the second signature with a second public key associated with the second device.
9. A system, comprising:
an interface configured receive an encrypted communication from a second device, wherein the encrypted communication includes a first encrypted secret, a second encrypted secret, a first signature, and a second signature;
a processor configured to verify the first signature and the second signature, decrypt the first encrypted secret using a first encryption algorithm associated with a first device, and decrypt the second encrypted secret using a second encryption algorithm associated with the second device, and combine the first decrypted secret and the second decrypted secret to recover a first communication; and
a memory configured to store data and instructions for the processor to recover the first communication.
10. The system of claim 9 , further comprising: an output unit configured to provide the first communication to a user of the system.
11. The system of claim 9 , wherein the first communication is an encryption key.
12. The system of claim 9 , wherein the processor is further configured to combine the first decrypted secret and the second decrypted secret according to a secret sharing algorithm.
13. A non-transitory computer-readable medium comprising instructions that when, executed by at least one processor, perform the steps of:
receiving, at a first device, an encrypted communication from a second device, wherein the encrypted communication includes a first encrypted secret, a second encrypted secret, a first signature, and a second signature;
verifying, by the first device, the first signature and the second signature;
based on the first and second signatures being valid:
decrypting, by the first device, the first encrypted secret using a first encryption algorithm associated with the first device;
decrypting, by the first device, the second encrypted secret using a second encryption algorithm associated with the second device; and
combining, by the first device, the first decrypted secret and the second decrypted secret to recover a first communication.
14. The non-transitory computer-readable medium of claim 13 , wherein the first communication is an encryption key.
15. The non-transitory computer-readable medium of claim 13 , further comprising instructions for:
providing the first communication to a user of the first device.
16. The non-transitory computer-readable medium of claim 13 , wherein decrypting the first secret includes instructions for:
deriving, by the first device, a first key-encrypting key using, at least in part, a first set of keys generated according to a first key derivation algorithm;
decrypting, by the first device, a first encrypted communication key using the first key-encrypting key; and
decrypting, by the first device, the first encrypted secret using the first decrypted communication key.
17. The non-transitory computer-readable medium of claim 16 , wherein decrypting the first secret includes instructions for:
deriving, by the first device, a second key-encrypting key using, at least in part, second set of keys generated according to a second key derivation algorithm;
decrypting, by the first device, a second encrypted communication key using the second key-encrypting key; and
decrypting, by the first device, the second encrypted secret using the second decrypted communication key.
18. The non-transitory computer-readable medium of claim 13 , wherein verifying the first signature comprises instructions for: verifying, by the first device, the first signature with a first public key associated with the second device.
19. The non-transitory computer-readable medium of claim 18 , wherein verifying the second signature comprises instructions for: verifying, by the first device, the second signature with a second public key associated with the second device.