Zone based key version encoding

1. An apparatus comprising:

a processor; and

a non-transitory computer readable medium storing machine readable instructions that when executed by the processor cause the processor to:

ascertain data that is to be encrypted;

ascertain a key, including a key version, that is to be used to encrypt the ascertained data;

generate encrypted data by encrypting the ascertained data based on the ascertained key;

determine, from a plurality of zones, a zone representing the key version;

generate encrypted zoned data by applying the determined zone to the encrypted data to encode the key version; and

store the encrypted zoned data including the encoded key version.

2. The apparatus according to claim 1 , wherein the ascertained data includes a binary-coded-decimal (BCD) number.

3. The apparatus according to claim 1 , wherein the instructions to generate the encrypted data by encrypting the ascertained data based on the ascertained key further comprise instructions to cause the processor to:

apply format preserving encryption to encrypt the ascertained data based on the ascertained key.

4. The apparatus according to claim 1 , wherein the instructions to determine the zone representing the key version further comprise instructions to cause the processor to:

convert a decimal value of the key version to a binary value;

determine a binary zone value from the binary value; and

convert the binary zone value to the zone representing the key version.

5. The apparatus according to claim 1 , wherein the instructions to generate the encrypted zoned data by applying the determined zone to the encrypted data to encode the key version further comprise instructions to cause the processor to:

determine a byte corresponding to the encrypted data; and

insert the zone representing the key version into the byte corresponding to the encrypted data.

6. The apparatus according to claim 1 , wherein the instructions are further to cause the processor to:

ascertain the encrypted zoned data;

extract the zone representing the key version from the ascertained encrypted zoned data;

determine, from the extracted zone representing the key version, a decimal value corresponding to the key version; and

ascertain the key corresponding to the determined decimal value corresponding to the key version.

7. The apparatus according to claim 6 , wherein the instructions are further to cause the processor to:

extract the encrypted data from the encrypted zoned data; and

decrypt the extracted encrypted data based on the ascertained key corresponding to the determined decimal value corresponding to the key version.

8. The apparatus according to claim 6 , wherein the instructions to determine, from the extracted zone representing the key version, the decimal value corresponding to the key version further comprise instructions to cause the processor to:

convert the extracted zone representing the key version to a binary value; and

convert the binary value to the decimal value corresponding to the key version.

9. The apparatus according to claim 7 , wherein the instructions to extract the encrypted data from the encrypted zoned data further comprise instructions to cause the processor to:

remove a zone bit from the encrypted zoned data.

10. A computer implemented method comprising:

ascertaining encrypted zoned data;

extracting a zone representing a key version from the encrypted zoned data;

determining, from the extracted zone, a decimal value corresponding to the key version;

ascertaining a key corresponding to the determined decimal value corresponding to the key version;

extracting encrypted data from the encrypted zoned data; and

decrypting the encrypted data based on the ascertained key.

11. The method according to claim 10 , wherein determining, from the extracted zone, the decimal value corresponding to the key version further comprises:

converting the extracted zone to a binary value; and

converting the binary value to the decimal value corresponding to the key version.

12. The method according to claim 10 , wherein the encrypted zoned data is determined by:

ascertaining data that is to be encrypted;

ascertaining the key, including the key version, that is to be used to encrypt the ascertained data; and

generating encrypted data by encrypting the ascertained data based on the ascertained key that is to be used to encrypt the ascertained data.

13. The method according to claim 12 , wherein the encrypted zoned data is determined by:

determining the zone representing the key version; and

generating the encrypted zoned data by applying the determined zone to the generated encrypted data to encode the key version.

14. A non-transitory computer readable medium having stored thereon machine readable instructions, the machine readable instructions, when executed, cause a processor to:

ascertain a key, including a key version, that is to be used to encrypt data;

generate encrypted data by applying format preserving encryption to encrypt the data based on the ascertained key;

determine zones representing the key version;

generate encrypted zoned data by applying the determined zones to the encrypted data to encode the key version; and

store the encrypted zoned data including the encoded key version.

15. The non-transitory computer readable medium according to claim 14 , wherein the machine readable instructions to determine the zones representing the key version further comprise instructions, that when executed, further cause the processor to:

convert a decimal value of the key version to a binary value;

determine binary zone values from the binary value; and

convert the binary zone values to the zones representing the key version.

16. The non-transitory computer readable medium according to claim 14 , wherein the machine readable instructions to generate the encrypted zoned data by applying the determined zones to the encrypted data to encode the key version further comprise instructions, that when executed, further cause the processor to:

determine bytes corresponding to the encrypted data; and

insert the zones representing the key version into the bytes corresponding to the encrypted data.

17. The non-transitory computer readable medium according to claim 14 , wherein the machine readable instructions, when executed, further cause the processor to:

ascertain the encrypted zoned data;

extract the zones representing the key version from the ascertained encrypted zoned data;

determine, from the extracted zones representing the key version, a decimal value corresponding to the key version; and

ascertain the key corresponding to the determined decimal value corresponding to the key version.

18. The non-transitory computer readable medium according to claim 17 , wherein the machine readable instructions, when executed, further cause the processor to:

extract the encrypted data from the encrypted zoned data; and

decrypt the extracted encrypted data based on the ascertained key corresponding to the determined decimal value corresponding to the key version.

19. The non-transitory computer readable medium according to claim 17 , wherein the machine readable instructions to determine, from the extracted zones representing the key version, the decimal value corresponding to the key version further comprise instructions, that when executed, further cause the processor to:

convert the extracted zones representing the key version to a binary value; and

convert the binary value to the decimal value corresponding to the key version.

20. The non-transitory computer readable medium according to claim 18 , wherein the machine readable instructions to extract the encrypted data from the encrypted zoned data further comprise instructions, that when executed, further cause the processor to:

remove zone bits from the encrypted zoned data.