Symantec Corporation

Networks Associates Technology, Inc.

F5, Inc.

Andrey Jivsov

Liang Cheng

Neha Kochar

Technology related to accessing security hardware keys is disclosed. In one example, a method includes receiving an initial request to perform a first cryptographic operation using a key stored in security hardware circuitry. In response to servicing the initial request, a persistent attribute of the key can be used to query the security hardware circuitry to receive a volatile attribute of the key. The volatile attribute of the key can be stored external to the security hardware circuitry to enable subsequent requests to perform cryptographic operations on the security hardware circuitry without querying the security hardware circuitry for the volatile attribute of the key. A subsequent request referencing the key can be received. The subsequent request can be serviced by using the security hardware circuitry and identifying the key using the stored volatile attribute of the key without querying the security hardware circuitry for the volatile attribute of the key.

Accessing security hardware keys

Computer readable storage medium, computer-implemented method, and computer system for identifying substring repetition in a pass phrase. A sub-string index is generated. The number of bits required to represent each character in the pass phrase is determined. An entropy value is assigned to each character in the pass phrase in accordance with a probability function that assigns highest probabilities at boundaries of an interval for the entropy of a character, or that assigns lowest probabilities when a ratio of a number of pass phrase characters to pass phrase length is equal to a ratio of a size the interval to a sum of interval sizes. A total entropy value for the pass phrase is computed to provide an indication of pass phrase quality.

Evaluating the predictability of a pass phrase

A technique, and system(s) implementing the technique, allow an encrypted message to be sent directly to a recipient, and when the recipient opens the message, the recipient's system sends a request to an arbiter server to retrieve decryption information to decrypt the message. When the arbiter server receives the request for the decryption information, the arbiter server generates evidence of the request and sends the decryption information to the recipient. In this way, an evidentiary trail, that cannot be repudiated, can be used to establish that the recipient received and attempted to open the message.

Growing community of inventors

Mountain View, CA, United States of America

Andrey Jivsov