Submission + - Cryptographic Key Rotation Solutions? (isnoop.net)
isnoop writes: "As part of a search for an ideal key-rotation approach, I've begun to wonder if there is an encryption method that would allow generation of more than one key that can be used to decrypt the same encrypted string. That key could then be split in two between the data storage machine and the data requesters, with the power on the side of the storage machine to revoke its half of the key at any time. This way, multiple keys could be used and revoked, but the underlying data would never have to be re-encrypted.
One possible solution could be a public/private key algorithm where multiple public keys can be generated for the same private key. The public keys could then be split and used as described.
Does anyone have any experience with this sort of problem or know an encryption method that might fit this description?"
One possible solution could be a public/private key algorithm where multiple public keys can be generated for the same private key. The public keys could then be split and used as described.
Does anyone have any experience with this sort of problem or know an encryption method that might fit this description?"
