Patent ID: 8774403

Claim:
A method for cryptographic processing of data using a network device that is operative to perform actions, comprising: responsive to receiving a request to rotate at least one current key, performing further actions, including: generating at least one transitional key by encrypting at least one current key using at least one system key; generating at least one new key based on at least one determined key parameter; activating the at least one new key based on data provided by at least two key holders, wherein the provided data includes at least a password provided by each key holder and at least a portion of keying data provided by each key holder, wherein the at least portion of keying data is based on at least one of seeding data, or entropy data; generating at least one new current key based on the at least one activated key, wherein the new current key is stored at least in volatile memory; and encrypting at least one transitional key using the at least one new current key and the password, and storing it in at least one key array.