Patent ID: 8340299

Claim:
A method of cryptographically processing data in a cryptographic system using an asymmetric key exchange, comprising: receiving, at a cryptographic accelerator device, a first key encryption key; storing an encrypted private key for a host processor in a data memory, wherein the private key is encrypted with the first key encrypted key; receiving, in the cryptographic accelerator device, encrypted session information from an external device, wherein the session information is encrypted using a public key for the host processor; decrypting, in the cryptographic accelerator device, the stored encrypted private key for the host processor using the first key encryption key; decrypting, in the cryptographic accelerator device, the encrypted session information using the private key for the host processor; generating, in the cryptographic accelerator device, a set of cryptographic keys for a session between the external device and the host processor using the session information; encrypting, in the cryptographic accelerator device, the set of cryptographic keys using the private key for the host processor; and transmitting, by the cryptographic system, the encrypted set of cryptographic keys for the session to the external device.