Patent ID: 9129121
Filing Date: 2015-09-08
Classification: G06F,H04L

Abstract:
1. A method comprising: receiving a first key packet that includes a cryptographic key identifier and an encrypted cryptographic key, wherein the first key packet also includes an encrypted signing key and a key signature; locating a second key packet stored in a cache by using the cryptographic key identifier of the first key packet as a memory address in the cache, wherein the second key packet is stored at the memory address identified by the cryptographic key identifier of the first key packet; determining that the first key packet matches the second key packet by comparing the encrypted cryptographic key of the first key packet with an encrypted cryptographic key of the second key packet; in response to determining that the first key packet matches the second key packet, retrieving an unencrypted cryptographic key from the memory address in the cache, wherein the unencrypted cryptographic key is an unencrypted version of the encrypted cryptographic key; and performing a cryptographic key operation using the retrieved unencrypted cryptographic key.