Method and system for asynchronous side channel cipher renegotiation
A method for asynchronous side channel cipher renegotiation includes: establishing, by a first computing device, a first communication channel and a second communication channel with a second computing device, where the first communication channel is an encrypted tunnel and packages exchanged using the encrypted tunnel are encrypted using a first cipher; receiving, by a receiver of the first computing device, a renegotiation request from the second computing device using the second communication channel, where the renegotiation request includes at least a password value and a relative time; generating, by a processor of the first computing device, a second cipher using at least an encryption protocol and the password value; receiving, by the receiver of the first computing device, a new encrypted packet from the second computing device using the first communication channel; and decrypting, by the processor of the first computing device, the new encrypted packet using the second cipher.
1. A method for asynchronous side channel cipher renegotiation, comprising:
establishing, by a first computing device, a first communication channel and a second communication channel with a second computing device, where the first communication channel is an encrypted tunnel and packages exchanged using the encrypted tunnel are encrypted using a first cipher;
receiving, by a receiver of the first computing device, a renegotiation request from the second computing device using the second communication channel, where the renegotiation request includes at least a password value and a relative time;
generating, by a processor of the first computing device, a second cipher using at least an encryption protocol and the password value;
receiving, by the receiver of the first computing device, a new encrypted packet from the second computing device using the first communication channel; and
decrypting, by the processor of the first computing device, the new encrypted packet using the second cipher.
2. The method of claim 1 , wherein the renegotiation request further includes the encryption protocol.
3. The method of claim 1 , wherein the new encrypted packet is received after the relative time has passed since receipt of the renegotiation request.
4. The method of claim 1 , further comprising:
decrypting, by the processor of the first computing device, the new encrypted packet using the first cipher upon decryption failure using the second cipher.
5. The method of claim 4 , wherein the first cipher is used upon decryption failure for a predetermined period of time and/or predetermined number of received packets.
6. The method of claim 5 , further comprising:
deleting, by the first computing device, the first cipher from a memory of the first computing device after the predetermined period of time and/or predetermined number of received packets.
7. The method of claim 1 , further comprising:
storing, in a memory of the first computing device, the first cipher and the second cipher.
8. The method of claim 1 , wherein the second communication channel uses a secure communication protocol.
9. A system for asynchronous side channel cipher renegotiation, comprising:
a first computing device;
a second computing device;
a first communication channel established between the first computing device and the second computing device, where the first communication channel is an encrypted tunnel and packages exchanged using the encrypted tunnel are encrypted using a first cipher; and
a second communication channel established between the first computing device and the second computing device, wherein
the first computing device includes
a receiver receiving a renegotiation request from the second computing device using the second communication channel, where the renegotiation request includes at least a password value and a relative time, and
a processor generating a second cipher using at least an encryption protocol and the password value, wherein
the receiver further receives a new encrypted packet from the second computing device using the first communication channel, and
the processor further decrypts the new encrypted packet using the second cipher.
10. The system of claim 9 , wherein the renegotiation request further includes the encryption protocol.
11. The system of claim 9 , wherein the new encrypted packet is received after the relative time has passed since receipt of the renegotiation request.
12. The system of claim 9 , wherein the processor of the first computing device further decrypts the new encrypted packet using the first cipher upon decryption failure using the second cipher.
13. The system of claim 12 , wherein the first cipher is used upon decryption failure for a predetermined period of time and/or predetermined number of received packets.
14. The system of claim 13 , wherein the first computing device deletes the first cipher from a memory of the first computing device after the predetermined period of time and/or predetermined number of received packets.
15. The system of claim 9 , wherein the first computing device further includes a memory storing the first cipher and the second cipher.
16. The system of claim 9 , wherein the second communication channel uses a secure communication protocol.