High security cryptosystem

1. A network device representing a user having a predefined associated password, a predefined associated symmetric crypto-key and a predefined associated asymmetric crypto-key, including a first private key portion, a second private key portion and a public key portion, comprising:

a memory configured to store a function;

an input device configured to input the user password; and

a processor configured (i) to process the input password in accordance with the stored function to generate the associated first private key portion and to at least one of encrypt, decrypt and sign a message with the generated first private key portion, in a first mode of operation, and (ii) to process the input password in accordance with the stored function to generate the associated symmetric crypto-key and to at least one of encrypt, decrypt and authenticate a message with the generated symmetric crypto-key in a second mode of operation;

wherein the predefined associated asymmetric crypto-key, is associated with a public cryptosystem; and

wherein the processor is further configured to operate in accordance with the first mode of operation unless notified that the public cryptosystem has been compromised, and to operate in accordance with the second mode of operation based on notification that the public cryptosystem has been compromised.

2. A device according to claim 1 , wherein:

in the first mode of operation, the processor processes the input password by performing a first number of iterations of the stored function; and

in the second mode of operation, the processor processes the input password by performing a second number of iterations of the stored function.

3. A device according to claim 2 , wherein the second number of iterations is greater than the first number of iterations.

4. A device according to claim 1 , wherein the function is a one-way function.

5. A device according to claim 1 , wherein the public cryptosystem is an RSA based cryptosystem.

6. A method of securing network communications with a user having a predefined associated password, a predefined associated symmetric crypto-key and a predefined associated asymmetric crypto-key, including a first private key portion, a second private key portion and a public key portion, comprising:

inputting the user password; and

selectively processing the input password in accordance with a single function to generate one of the associated first private key portion and the associated symmetric crypto-key; and performing at least one of encrypting, decrypting and authenticating a message with the generated one of the associated first private key portion and the associated symmetric crypto-key;

wherein the predefined associated asymmetric crypto-key, is associated with a public cryptosystem;

wherein the input password is selectively processed in accordance with a single function to generate the associated first private key portion if the public cryptosystem is uncompromised; and the input password is selectively processed in accordance with a single function to generate the associated symmetric crypto-key if the public cryptosystem is compromised.

7. A method according to claim 6 , wherein:

the processing of the input password to generate the associated first private key portion includes performing a first number of iterations of the function; and

the processing of the input password to generate the associated symmetric crypto-key includes performing a second number of iterations of the function.

8. A method according to claim 7 , wherein the second number of iterations is greater than the first number of iterations.

9. A method according to claim 6 , wherein the function is a one-way function.

10. A method according to claim 6 , wherein the public cryptosystem is an RSA based cryptosystem.

11. A communications network for securing communications of a user having a predefined associated password, a predefined associated symmetric crypto-key and a predefined associated asymmetric crypto-key, including a first private key portion, a second private key portion and a public key portion, comprising:

a first network station configured to store the predefined associated symmetric crypto-key and the second private key portion; and

a second network station configured to store a function, to receive an input representing the user password, and to process the input password in accordance with the stored function to generate one of (i) the associated first private key portion in a first mode of operation, and (ii) the associated symmetric crypto-key in a second mode of operation;

wherein the first and the second network stations are further configured to encrypt and decrypt and authenticate communications between the first and the second network stations with the generated first private key portion and the stored second private key portion in the first mode of operation, and with the generated symmetric crypto-key and the stored symmetric crypto-key in the second mode of operation; wherein the predefined associated asymmetric crypto-key is associated with a public cryptosystem;

wherein the first network station is further configured to transmit a notice that the public cryptosystem has been compromised to the second network station

wherein the second network station is further configured to operate in accordance with the second mode of operation only after receipt of the transmitted notice.

12. A network according to claim 11 , wherein:

in the first mode of operation, the second network station processes the input password by performing a first number of iterations of the stored function; and

in the second mode of operation, the second network station processes the input password by performing a second number of iterations of the stored function.

13. A network according to claim 12 , wherein the second number of iterations is greater than the first number of iterations.

14. A network according to claim 11 , wherein the function is a one-way function.

15. A network according to claim 11 , wherein the public cryptosystem is an RSA based cryptosystem.