[Cfrg] Dynamic Key Changes on Encrypted Sessions.

[Peter Alexander <[e-mail]>]

Greetings everyone,

I have tried sending this message before but it was getting blocked. So I
am trying again :)

Eliot Lear from the SAGG mailing list pointed me in your direction. Have
been meaning to post but got busy.


Briefly;

I co-invented a VPN-like method for securing transmissions where encryption
keys could be changed without having to tear-down, and rebuild the entire
session. At the time we also tried to patent the technology but essentially
ran out of funding. The organization has since dissolved. This was back in
2010. Given that the invention always sparked interest, but never truly
gone anywhere I would like to begin the process of opening it up to a wider
audience.

What follows are a few of the high-level design elements which we thought
were unique to the art.

- Dynamic key changes during encrypted sessions (no need to restart)
- Initial key exchange agnostic. Ex: Possible to use IPSec/DH exchange to
build initial tunnel
- Packets containing keys are obfuscated using upto three methods
- Can also utilize locally stored key arrays. Sending index of key instead
of key itself.

We were able to come up with working code (Linux 2.6 kernel & Android
Gingerbread), which I can share once I remove the proprietary crypto
libraries. I also have all of the documentation/presentation slides that I
authored at the time.

Kindly let me know if this is something worth moving forward with. I am
open to discussion/criticism as needed.

Cheers!