Symmetrically encrypt a master passphrase key
Examples disclosed herein relate to symmetrically encrypting a master passphrase key. In one implementation, a computing system includes a machine-readable storage medium to store a symmetrically encrypted master passphrase key, an encrypted version of a first passphrase key associated with a second machine-readable storage medium encrypted using the master passphrase key, and an encrypted version of a second passphrase key associated with a third machine-readable storage medium encrypted using the passphrase key. A processing resource may symmetrically encrypt the master passphrase key using an encryption key derived from authentication information and/or decrypt the stored master passphrase key using a decryption key derived from the authentication information.
1. A computing system, comprising:
a first non-transitory machine-readable storage medium associated with a first passphrase key used to unlock the first non-transitory machine-readable storage medium;
a second non-transitory machine-readable storage medium associated with a second passphrase key used to unlock the second non-transitory machine-readable storage medium;
a third non-transitory machine-readable storage medium to store:
a symmetrically encrypted master passphrase key;
an encrypted version of the first passphrase key encrypted using the master passphrase key;
an encrypted version of the second passphrase key encrypted using the master passphrase key; and
a processing resource to:
at least one of:
symmetrically encrypt the master passphrase key using an encryption key derived from authentication information; and
decrypt the stored master passphrase key using a decryption key derived from the authentication information;
wherein the authentication information is associated with a first user and wherein the third non-transitory machine-readable storage medium further stores an encrypted version of the master passphrase key symmetrically encrypted using an encryption key derived from second authentication information associated with a second user.
2. The computing system of claim 1 , wherein the processing resource decrypts the stored master passphrase key and wherein the processing resource is further to:
decrypt the encrypted version of the first passphrase using the decrypted master passphrase key; and
access the first non-transitory machine-readable storage device using the first passphrase.
3. The computing system of claim 1 , further comprising a fourth non-transitory machine-readable storage medium and wherein the fourth non-transitory machine-readable storage medium further stores:
an encrypted version of a second master passphrase key encrypted using a second encryption key derived from second authentication information; and
an encrypted version of a third passphrase key associated with the fourth non-transitory machine-readable storage medium encrypted using the second master passphrase key.
4. The computing system of claim 3 , wherein the master passphrase key is encrypted using a first method and wherein the second master passphrase key is encrypted using a second method.
5. The computing system of claim 1 , wherein the authentication information comprises an operating system password.
6. The computing system of claim 1 , wherein the processing resource comprises platform firmware and wherein the first and second non-transitory machine-readable storage mediums comprise non-volatile memory devices.
7. The method of claim 1 , wherein the first and second non-transitory machine-readable storage mediums comprise non-volatile memory devices.
8. A method, comprising:
associating a first non-transitory machine-readable storage medium with a first passphrase key used to unlock the first non-transitory machine-readable storage medium;
associating a second non-transitory machine-readable storage medium with a second passphrase key used to unlock the second non-transitory machine-readable storage medium;
storing, by a third non-transitory machine-readable storage medium, a symmetrically encrypted master passphrase key, an encrypted version of the first passphrase key encrypted using the master passphrase key, and an encrypted version of the second passphrase key encrypted using the master passphrase key; and
at least one of:
symmetrically encrypting a master passphrase key using an encryption key derived from authentication information; and
decrypting the stored master passphrase key using a decryption key derived from the authentication information;
wherein the authentication information is associated with a first user and wherein the third non-transitory machine-readable storage medium further stores an encrypted version of the master passphrase key symmetrically encrypted using an encryption key derived from second authentication information associated with a second user.
9. The method of claim 8 , wherein the stored master passphrase key is decrypted and further comprising:
decrypting the encrypted version of the first passphrase using the decrypted master passphrase key; and
accessing the first non-transitory machine-readable storage device using the first passphrase.
10. The method of claim 8 , further comprising storing, by a fourth non-transitory machine-readable storage medium, an encrypted version of a second master passphrase key encrypted using a second encryption key derived from second authentication information and an encrypted version of a third passphrase key associated with the fourth non-transitory machine-readable storage medium encrypted using the second master passphrase key.
11. The method of claim 8 , wherein the master passphrase key is encrypted using a first method and wherein the second master passphrase key is encrypted using a second method.
12. The method of claim 8 , wherein the authentication information comprises an operating system password.
13. A computing system, comprising:
a first non-transitory machine-readable storage medium associated with a first passphrase key used to unlock the first non-transitory machine-readable storage medium;
a second non-transitory machine-readable storage medium associated with a second passphrase key used to unlock the second non-transitory machine-readable storage medium;
a third non-transitory machine-readable storage medium to store:
a symmetrically encrypted master passphrase key;
an encrypted version of the first passphrase key encrypted using the master passphrase key;
an encrypted version of the second passphrase key encrypted using the master passphrase key;
a processing resource to:
at least one of:
symmetrically encrypt the master passphrase key using an encryption key derived from authentication information; and
decrypt the stored master passphrase key using a decryption key derived from the authentication information; and
a fourth non-transitory machine-readable storage medium and wherein the fourth non-transitory machine-readable storage medium further stores:
an encrypted version of a second master passphrase key encrypted using a second encryption key derived from second authentication information; and
an encrypted version of a third passphrase key associated with the fourth non-transitory machine-readable storage medium encrypted using the second master passphrase key.
14. The computing system of claim 13 , wherein the master passphrase key is encrypted using a first method and wherein the second master passphrase key is encrypted using a second method.
15. The computing system of claim 13 , wherein the authentication information comprises an operating system password.