Scribd
Upload
6 views4 pages

Hybrid Cryptography: AES & ECC Overview

This document describes a hybrid cryptography system that uses both asymmetric and symmetric encryption. It uses ECC with a 571-bit key for asymmetric encryption and AES with a 256-bit key for symmetric encryption. On the client side, a new AES key is generated for each record and used to encrypt the data before being encrypted with the public ECC key and sent to the server. The server then decrypts the AES key with its private ECC key and uses the decrypted AES key to decrypt the audio file, providing an additional layer of security with regular key rotation.

Uploaded by

Akshay 'Jughead' Elavia
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
6 views4 pages

Hybrid Cryptography: AES & ECC Overview

This document describes a hybrid cryptography system that uses both asymmetric and symmetric encryption. It uses ECC with a 571-bit key for asymmetric encryption and AES with a 256-bit key for symmetric encryption. On the client side, a new AES key is generated for each record and used to encrypt the data before being encrypted with the public ECC key and sent to the server. The server then decrypts the AES key with its private ECC key and uses the decrypted AES key to decrypt the audio file, providing an additional layer of security with regular key rotation.

Uploaded by

Akshay 'Jughead' Elavia
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

Hybrid Cryptography

Asymetric Cryptography
ECC 571 bit

Generated on Server Side

Public Key shared with Client

Symmetric Cryptography
AES 256 bit

New Key generated on Client Side for each new record.

Data shall be encrypted using this key

This key shall be encrypted by the ECC public key and

sent over to the server


Security Level comparison of
algorithms
Encryption/Decryption Process

On Android device:
Generate an AES secret key
Encrypt the audio with that AES key
Encrypt the generated AES secret key using the ECC
public key
Combine the blobs from step 2 and step 3 into a single
blob and send to server
Encryption/Decryption Process

On server:
Split the blob into 2 parts
Use the ECC private key to decrypt the AES secret key
Use the decrypted AES secret key to decrypt the audio

** Added Security on Server:


The ECC Key Pair needs to be rotated/changed after a period
of time

You might also like