Coordination and management of keys and instructions for multiple encryption
Systems and methods for coordination and management of keys and instructions for multiple encryption include, responsive to receiving encrypted data that has been encrypted via a plurality of layers of encryption, accessing a coordinator to determine instructions for multiple encryption; and decrypting the encrypted data based on the instructions and utilizing a plurality of keys with a key for each of the plurality of layers of encryption.
1 . A method for managing multiple encryption, implemented at a recipient, the method comprising steps of:
performing handshake between a source and a coordinator located at the recipient to obtain a plurality of keys, each key including a key value and an instruction payload comprising coordinator-readable metadata specifying at least one of a decryption layer order, an encryption algorithm, or an association with another key of the plurality of keys, wherein instructions for the multiple encryption are included with the plurality of keys;
responsive to receiving encrypted data that has been encrypted via a plurality of layers of encryption of the multiple encryption, accessing and parsing by the coordinator the instruction payloads to determine the instructions for the plurality of layers of encryption of the multiple encryption, wherein the instructions are distributed between the plurality of keys such that at least one key includes instructions specifying an encryption algorithm or an encryption layer associated with another key of the plurality of keys; and
decrypting the encrypted data based on the parsed instructions and utilizing a plurality of keys with a key for each of the plurality of layers of encryption.
2 . The method of claim 1 , wherein the instructions include details which describe any of a direction of the plurality of layers of encryption, an encryption algorithm for each of the plurality of layers of encryption, and identification of the plurality of keys for each of the plurality of layers of encryption.
3 . The method of claim 1 , wherein the plurality of layers of encryption include symmetric-key encryption, asymmetric-key encryption, and a combination thereof.
4 . The method of claim 1 , wherein the plurality of keys are associated with at least two users, and wherein the steps further include:
obtaining consent from the at least two users by the coordinator prior to the decrypting.
5 . A non-transitory computer-readable medium comprising instructions that, when executed, cause one or more processors at a recipient to perform steps of:
performing handshake between a source and a coordinator located at the recipient to obtain a plurality of keys, each key including a key value and an instruction payload comprising coordinator-readable metadata specifying at least one of a decryption layer order an encryption algorithm, or an association with another key of the plurality of keys, wherein instructions for the multiple encryption are included with the plurality of keys;
responsive to receiving encrypted data that has been encrypted via a plurality of layers of encryption of the multiple encryption, accessing and parsing by the coordinator the instruction payloads to determine the instructions for plurality of layers of encryption of the multiple encryption, wherein the instructions are distributed between the plurality of keys such that at least one key includes instructions specifying an encryption algorithm or an encryption layer associated with another key of the plurality of keys; and
decrypting the encrypted data based on the parsed instructions and utilizing a plurality of keys with a key for each of the plurality of layers of encryption.
6 . The non-transitory computer-readable medium of claim 5 , wherein the instructions include details which describe any of a direction of the plurality of layers of encryption, an encryption algorithm for each of the plurality of layers of encryption, and identification of the plurality of keys for each of the plurality of layers of encryption.
7 . The non-transitory computer-readable medium of claim 5 , wherein the plurality of layers of encryption include symmetric-key encryption, asymmetric-key encryption, and a combination thereof.
8 . The non-transitory computer-readable medium of claim 5 , wherein the plurality of keys are associated with at least two users, and wherein the steps further include:
obtaining consent from the at least two users by the coordinator prior to the decrypting.