Secure storage and usage of cryptography keys

Abstract

According to an aspect, a first digital system splits a cryptography key into a first key part (S) and a second key part (S), stores Sin a policy-controlled storage which permits storage according to access policies and stores Sin a local storage of the first digital system. Upon identifying a requirement in a second digital system for the cryptography key, the first digital system configures for the policy-controlled storage a first policy permitting access of Sto the second digital system and then sends Sdirectly to the second digital system. The second digital system reconstructs the cryptography key by retrieving Sfrom the policy-controlled storage based on the first policy and forming the cryptography key from the retrieved Sand Sreceived from the first digital system. Thus, a cryptography key is securely stored and used, without having any single point of attack.