Using a single AES key to encrypt PKCS #7 files
Cryptographic systems and methods are provided. A method, according to one implementation, includes a step of generating a plurality of key pairs in response to receiving a request from a client for one or more digital certificates. The key pairs are associated respectively with the one or more digital certificates. Also, each key pair includes a public key and a private key. The method further includes a step of utilizing at least the plurality of key pairs to generate the one or more digital certificates. Also, the method includes a step of encrypting the one or more digital certificates and respective private keys using a single Advanced Encryption Standard (AES) key. The method also includes a step of sending the encrypted one or more digital certificates and private keys back to the client.
1 . A server comprising:
a processing device; and
a memory device configured to store computer code having instructions that enable the processing device to perform the steps of
generating a plurality of key pairs in response to receiving a request from a client for one or more digital certificates, the plurality of key pairs associated respectively with the one or more digital certificates, wherein each key pair includes a public key and a private key,
utilizing at least the plurality of key pairs to generate the one or more digital certificates,
encrypting the one or more digital certificates and respective private keys using a single Advanced Encryption Standard (AES) key, and
sending the encrypted one or more digital certificates and private keys back to the client.
2 . The server of claim 1 , wherein the step of sending the encrypted one or more digital certificates and private keys includes the step of creating a plurality of Public-Key Cryptography Standard 7 (PKCS #7) files, wherein each PKCS #7 file includes a corresponding digital certificate and key pair, and wherein the single AES key is configured to decrypt each PKCS #7 file.
3 . The server of claim 1 , wherein the step of using the single AES key for the one or more digital certificates allows the client to decrypt the single AES key one time to enable decryption of each of the encrypted one or more digital certificates.
4 . The server of claim 1 , further comprising a trust manager configured to receive the request and generate the key pairs.
5 . The server of claim 1 , further comprising a certificate management system configured to generate and encrypt the one or more digital certificates.
6 . The server of claim 1 , wherein the request for the one or more digital certificates is a request for digital certificates to be applied to a plurality of electronic devices.
7 . The server of claim 6 , wherein the one or more digital certificates are applied to the plurality of electronic devices during a predetermined timeframe when the electronic devices are manufactured.
8 . The server of claim 1 , wherein the step of generating the one or more digital certificates further includes utilizing a Certificate Signing Request (CSR) generated along with the generating of the plurality of key pairs.
9 . A non-transitory computer-readable medium configured to store computer logic having instructions that enable a processing system to:
generate a plurality of key pairs in response to receiving a request from a client for one or more digital certificates, the plurality of key pairs associated respectively with the one or more digital certificates, wherein each key pair includes a public key and a private key,
utilize at least the plurality of key pairs to generate the one or more digital certificates,
encrypt the one or more digital certificates and respective private keys using a single Advanced Encryption Standard (AES) key, and
send the encrypted one or more digital certificates and private keys back to the client.
10 . The non-transitory computer-readable medium of claim 9 , wherein sending the encrypted one or more digital certificates and private keys to the client further includes creating a plurality of Public-Key Cryptography Standard 7 (PKCS #7) files, wherein each PKCS #7 file includes a corresponding digital certificate and key pair, and wherein the single AES key is configured to decrypt each PKCS #7 file.
11 . The non-transitory computer-readable medium of claim 9 , wherein using the single AES key for the one or more digital certificates allows the client to decrypt the single AES key one time to enable decryption of each of the encrypted one or more digital certificates.
12 . The non-transitory computer-readable medium of claim 9 , wherein the instructions further enable the processing system to use a trust manager to receive the request and generate the key pairs and use a certificate management system to generate and encrypt the one or more digital certificates.
13 . The non-transitory computer-readable medium of claim 9 , wherein the request for the one or more digital certificates is a request for digital certificates to be applied to a plurality of electronic devices, and wherein the one or more digital certificates are applied to the plurality of electronic devices during a predetermined timeframe when the electronic devices are manufactured.