Distributed Symmetric
Key Establishment (DSKE)
Distributed Symmetric
Key Establishment (DSKE)
Distributed Symmetric
Key Establishment (DSKE)
Delivering the industry’s first symmetric key distribution technology that achieves future-proofed security at scale, without asymmetric encryption
Delivering the industry’s first symmetric key distribution technology that achieves future-proofed security at scale, without asymmetric encryption
Delivering the industry’s first symmetric key distribution technology that achieves future-proofed security at scale, without asymmetric encryption
How It Works
Trusted technology for defense-in-depth
Trusted technology for
defense-in-depth
Organizations rely on key distribution to exchange and protect highly sensitive data. But legacy key management processes can be error-prone, expensive to manage, and breakable.
Distributed Symmetric Key Establishment (DSKE) is a modern key distribution technology. It fully automates the creation and distribution of symmetric keys, without relying on computational complexity or asymmetric encryption.
DSKE is the industry’s first scalable symmetric key technology, combining the scalability of PKI, the security of quantum key distribution (QKD) and the simplicity of pre-shared keys.
Organizations rely on key distribution to exchange and protect highly sensitive data. But legacy key management processes can be error-prone, expensive to manage, and breakable.
Distributed Symmetric Key Establishment (DSKE) is a modern key distribution technology. It fully automates the creation and distribution of symmetric keys, without relying on computational complexity or asymmetric encryption.
DSKE is the industry’s first scalable symmetric key technology, combining the scalability of PKI, the security of quantum key distribution (QKD) and the simplicity of pre-shared keys.
01
DSKE Client Provisioning
Each security hub generates data for each DSKE client. Activation data include high quality random numbers, also called pre-shared random data (PSRD)
01
DSKE Client Provisioning
Each security hub generates data for each DSKE client. Activation data include high quality random numbers, also called pre-shared random data (PSRD)
01
DSKE Client Provisioning
Each security hub generates data for each DSKE client. Activation data include high quality random numbers, also called pre-shared random data (PSRD)
02
Key Exchange: Key Generation
A DSKE client can request a key with any other DSKE client over IP networks via the security hubs.Key requests include information about the DSKE client destination and other metadata. Key requests are encrypted and authenticated using PSRD.
02
Key Exchange: Key Generation
A DSKE client can request a key with any other DSKE client over IP networks via the security hubs.Key requests include information about the DSKE client destination and other metadata. Key requests are encrypted and authenticated using PSRD.
02
Key Exchange: Key Generation
A DSKE client can request a key with any other DSKE client over IP networks via the security hubs.Key requests include information about the DSKE client destination and other metadata. Key requests are encrypted and authenticated using PSRD.
03
Key Exchange: Key Recovery
Security Servers forward the key instructions to the DSKE Client destination. The DSKE Client destination is the only one that can rebuild the key as its the only one in possession of the PSRD required for reconstruction.
03
Key Exchange: Key Recovery
Security Servers forward the key instructions to the DSKE Client destination. The DSKE Client destination is the only one that can rebuild the key as its the only one in possession of the PSRD required for reconstruction.
03
Key Exchange: Key Recovery
Security Servers forward the key instructions to the DSKE Client destination. The DSKE Client destination is the only one that can rebuild the key as its the only one in possession of the PSRD required for reconstruction.
04
Key Exchange: Trust Removal
The two DSKE Clients now share the same key, which can be used in any symmetric cryptographic algorithm. The key is not known in the security hubs, thanks to the secrete sharing algorithm used to build the key.
04
Key Exchange: Trust Removal
The two DSKE Clients now share the same key, which can be used in any symmetric cryptographic algorithm. The key is not known in the security hubs, thanks to the secrete sharing algorithm used to build the key.
04
Key Exchange: Trust Removal
The two DSKE Clients now share the same key, which can be used in any symmetric cryptographic algorithm. The key is not known in the security hubs, thanks to the secrete sharing algorithm used to build the key.
Publications & Credentials
DSKE White Paper and Security Proof
DSKE White Paper and
Security Proof
DSKE relies on pre-shared random numbers between DSKE clients and a group of Security Hubs. Any group of DSKE clients can use the DSKE protocol to distill from the pre-shared numbers a secret key.
The clients are protected from Security Hub compromise via a secret sharing scheme that allows the creation of the final key without the need to trust individual Security Hubs.
Read our DSKE White Paper and Security Proof.
DSKE relies on pre-shared random numbers between DSKE clients and a group of Security Hubs. Any group of DSKE clients can use the DSKE protocol to distill from the pre-shared numbers a secret key.
The clients are protected from Security Hub compromise via a secret sharing scheme that allows the creation of the final key without the need to trust individual Security Hubs.
Read our DSKE White Paper and Security Proof.
Benefits
Benefits
Symmetric key distribution technology
Symmetric key distribution technology
DSKE is the industry’s first key distribution technology that
delivers future-proofed security at scale without the use of any asymmetric cryptography.
DSKE is the industry’s first key distribution technology that delivers future-proofed security at scale without the use of any asymmetric cryptography.
Future Proof
Future Proof
Scale With Ease
Scale With Ease
Integrate Effortlessly
Integrate Effortlessly
Whats Included
Whats Included
Automate the generation and distribution of symmetric
keys in your infrastructure
Automate the generation and distribution of symmetric
keys in your infrastructure
Automate the generation and distribution of symmetric
keys in your infrastructure
Available for IPsec, MACsec, and optical encryptors
Available for IPsec, MACsec, and optical encryptors
Easy to integrate in your infrastructure
Easy to integrate in your infrastructure
Scalable, quantum-safe, and future-proof solution
Scalable, quantum-safe, and future-proof solution
GET IN TOUCH
Talk to our team about securing your network
Talk to our team about securing your network
GET IN TOUCH