Protecting data from brute force attack
Securely storing data includes encrypting the data using a random key to provide obfuscated data, scrambling the obfuscated data to provide scrambled obfuscated data, generating a scramble schema indicating how to unscramble the scrambled obfuscated data, encrypting the scrambled obfuscated data to provide encrypted scrambled obfuscated data, splitting the scramble schema, and distributing separate portions of the scramble schema and separate portions of the encrypted scrambled obfuscated data to separate entities. The data may be private key data. Securely storing data may also include concatenating the random key on to the obfuscated data prior to scrambling the obfuscated data, wherein the random key is scrambled together with the obfuscated data. Scrambling the obfuscated data may use a Fisher Yates Shuffle mechanism. Securely storing data may also include generating and distributing a symmetric authentication key that is used to authenticate a first entity to a second entity.
1. A method for securely storing data, the method comprising:
scrambling the data to provide scrambled data;
generating a scramble schema indicating how to unscramble the scrambled data;
splitting each of the scrambled data and the scramble schema into a plurality of portions, wherein splitting the scramble schema comprises, for each of one or more blocks of the scramble schema, setting a first split portion equal to a random number and setting a second split portion equal to the difference between the block of the scramble schema and the random number; and
distributing both a portion of the scrambled data and a portion of the scramble schema to each of a plurality of entities.
2. The method of claim 1 , wherein scrambling the data comprises obfuscating and scrambling the data, wherein obfuscating the data comprises performing an XOR operation using a random key.
3. The method of claim 2 , wherein the scrambled data comprises the random key.
4. The method of claim 1 , further comprising encrypting the scrambled data, and wherein splitting the scrambled data into a plurality of portions comprises splitting encrypted scrambled data into a plurality of portions.
5. The method of claim 4 , wherein encrypting the scrambled data uses a secret obtained from a user.
6. The method of claim 1 , wherein the data is private key data.
7. The method of claim 1 , wherein scrambling the data uses a Fisher Yates Shuffle mechanism.
8. The method of claim 1 , wherein a first one of the plurality of entities is a user device and a second one of the plurality of entities is a key escrow.
9. A method for reconstructing data that has been distributed across a plurality of entities, the method comprising:
obtaining a first portion of a scramble schema and a first portion of encrypted scrambled data stored at a first one of the plurality of entities;
obtaining a second portion of the scramble schema and a second portion of the encrypted scrambled data stored at a second one of the plurality of entities;
reconstructing the scramble schema using the first and second portions thereof, wherein the scramble schema was split into the first and second portions using a method comprising, for each of one or more blocks of the scramble schema, setting a first split portion equal to a random number and setting a corresponding second split portion equal to the difference between the block of the scramble schema and the random number;
reconstructing the encrypted scrambled data using the first and second portions thereof;
decrypting the encrypted scrambled data to provide scrambled data; and
unscrambling the scrambled data using the scramble schema to obtain the data.
10. The method of claim 9 , wherein the data is private key data.
11. The method of claim 9 , wherein unscrambling the scrambled data comprises using a Fisher Yates Shuffle mechanism.
12. The method of claim 9 , wherein reconstructing the scramble schema comprises adding corresponding first and second split portions of the one or more blocks.
13. The method of claim 9 , wherein the first one of the plurality of entities is a user device and the second one of the plurality of entities is a key escrow.
14. The method of claim 13 , wherein decrypting the encrypted scrambled data uses a secret obtained from a user of the user device.
15. A device for reconstructing data, the device comprising:
at least one processor coupled to a memory, the memory storing processor executable instructions that configure the at least one processor to:
obtain a first portion of a scramble schema and a first portion of encrypted scrambled data from a first entity;
obtain a second portion of the scramble schema and a second portion of the encrypted scrambled data from a second entity;
reconstruct the scramble schema using the first and second portions thereof, wherein the scramble schema was split into the first and second portions using a method comprising, for each of one or more blocks of the scramble schema, setting a first split portion equal to a random number and setting a corresponding second split portion equal to the difference between the block of the scramble schema and the random number;
reconstruct the encrypted scrambled data using the first and second portions thereof;
decrypt the encrypted scrambled data to provide scrambled data; and
unscramble the scrambled data using the scramble schema to obtain the data.
16. The device of claim 15 , wherein the device is one of the first or second entities.
17. The device of claim 16 , wherein the other of the first or second entities is a key escrow.
18. The device of claim 15 , wherein the device is one of: a mobile phone, a tablet, a laptop computer, or a desktop computer.