DESlock + User Manual

Transferring Encryption Keys
W hy t h e n ee d fo r t ra ns f er s
In order f or two (or more) DESlock+ users to be able to access common encrypted data, their
Key-Files must both contain the same encryption key. As two Key -Files cannot generate the
same encryption key, an encryption key must be generated in one and then transf erred to the
other.
H o w t r an s f e rs w o rk
All encryption key transf ers are secured by RSA encryption. Put simply, this is a recognised
method of protecting the key being transf erred so that o nly the receiving dev ice can use it. In
practice it means that the Key being transf erred is encrypted by the receiving key -f ile's public
encryption key. In this way the key being transf erred is secure (the f ile is encrypted), and only
the receiv er can decrypt and use the f ile.
The f act that the transf er can only occur if the destination is explicitly specified (through the
public key of the receiver) has important implications f or encryption key backups, which are
cov ered later.
T ra ns fe r s t a g es
The process of transf erring an encryption key can be thought of as f our distinct steps.
o The Recipient gains access to data encrypted with a key they do not hav e (ie receives
some files by email, FTP, CD etc)
o The Recipient generates a Key Request f or the Originator of the data. This request
extracts the public key from their Key -File in a form that can be sent to the Originator.
o The Originator creates an encryption Key Update using the supplied Key Request. This
o
extract uses the supplied public key (the request) to prot ect (encrypt) the requested key
to create an 'encryption key update'.
The Recipient uses the update to add the encryption key into the key space of their
Key-File.
Because the transf er processes uses the RSA algorithm, and because no t wo Key -Files will
hav e the same public key “pair” a supplied encryption key update will only be usef ul to the
intended recipient of the update.
K e y T r a ns f e r W i za rd
To eff ect encryption Key Transf ers, DESlock+ prov ides the Key Transf er W izard. This wizard
simplifies the transf er process, allowing encryption keys to be easily transf erred f rom one
Key-File to another.
See the Key Transf er W izard f or more detail.
Version 4.4 Copyright © DESlock Ltd
61 of 162
">