System and method for shredding a forum of secrets

1. A computer-implemented method comprising:

storing, by a computing device, —a data encryption key in a keystore;

generating a plurality of system values, wherein a threshold number of the plurality of system values is required to access the data encryption key from the keystore;

storing the plurality of system values in a plurality of different locations;

deleting more system values of the plurality of system values than the threshold number of the plurality of system values required to access the data encryption key from the keystore;

removing the data encryption key from the keystore, wherein deleting more system values of the plurality of system values than the threshold number of the plurality of system values required to access the data encryption key includes reprogramming at least a portion of the plurality of system values with new system values after the data encryption key has been removed; and

writing a new copy of the keystore from the data encryption key such that the new copy of the keystore is protected with the new system values.

2. The computer-implemented method of claim 1 wherein at least one location of the plurality of different locations includes electrically erasable programmable read-only memory.

3. The computer-implemented method of claim 1 wherein at least one location of the plurality of different locations includes a self-encrypting hard drive (SED).

4. The computer-implemented method of claim 3 wherein a range on the SED stores one or more of the plurality of system values.

5. The computer-implemented method of claim 4 further comprising locking the range on the SED with a unique PIN.

6. The computer-implemented method of claim 3 wherein the data encryption key is a unique data encryption key provisioned for the SED.

7. The computer-implemented method of claim 1 wherein writing the new copy of the keystore from the data encryption key includes the keystore becoming inaccessible in response to removing the data encryption key from the keystore.

8. A computer program product residing on a non-transitory computer readable storage medium having a plurality of instructions stored thereon which, when executed across one or more processors, causes at least a portion of the one or more processors to perform operations comprising:

storing —a data encryption key in a keystore;

generating a plurality of system values, wherein a threshold number of the plurality of system values is required to access the data encryption key from the keystore;

storing the plurality of system values in a plurality of different locations;

deleting more system values of the plurality of system values than the threshold number of the plurality of system values required to access the data encryption key from the keystore;

removing the data encryption key from the keystore, wherein deleting more system values of the plurality of system values than the threshold number of the plurality of system values required to access the data encryption key includes reprogramming at least a portion of the plurality of system values with new system values after the data encryption key has been removed; and

writing a new copy of the keystore from the data encryption key such that the new copy of the keystore is protected with the new system values.

9. The computer program product of claim 8 wherein at least one location of the plurality of different locations includes electrically erasable programmable read-only memory.

10. The computer program product of claim 8 wherein at least one location of the plurality of different locations includes a self-encrypting hard drive (SED).

11. The computer program product of claim 10 wherein a range on the SED stores one or more of the plurality of system values.

12. The computer program product of claim 11 wherein the operations further comprise locking the range on the SED with a unique PIN.

13. The computer program product of claim 10 wherein the data encryption key is a unique data encryption key provisioned for the SED.

14. A computing system including one or more processors and one or more memories configured to perform operations comprising:

storing a data encryption key in a keystore;

generating a plurality of system values, wherein a threshold number of the plurality of system values is required to access the data encryption key from the keystore;

storing the plurality of system values in a plurality of different locations;

deleting more system values of the plurality of system values than the threshold number of the plurality of system values required to access the data encryption key from the keystore;

removing the data encryption key from the keystore, wherein deleting more system values of the plurality of system values than the threshold number of the plurality of system values required to access the data encryption key includes reprogramming at least a portion of the plurality of system values with new system values after the data encryption key has been removed; and

writing a new copy of the keystore from the data encryption key such that the new copy of the keystore is protected with the new system values.

15. The computing system of claim 14 wherein at least one location of the plurality of different locations includes one of an electrically erasable programmable read-only memory and a self-encrypting hard drive (SED).

16. The computing system of claim 15 wherein a range on the SED stores one or more of the plurality of system values.

17. The computing system of claim 16 wherein the operations further comprise locking the range on the SED with a unique PIN.

18. The computing system of claim 15 wherein the data encryption key is a unique data encryption key provisioned for the SED.