CPC G06F 12/1408 (2013.01) [G06F 11/1004 (2013.01); G06F 11/1076 (2013.01); H04L 9/085 (2013.01); H04L 9/0894 (2013.01); H04L 9/14 (2013.01); H04L 9/3239 (2013.01); H04L 9/3263 (2013.01); H04L 63/061 (2013.01); H04L 67/06 (2013.01); H04L 67/1097 (2013.01); H04L 67/306 (2013.01); G06F 2212/1052 (2013.01); H04L 1/0041 (2013.01); H04L 1/0045 (2013.01); H04L 63/0428 (2013.01)] | 20 Claims |
1. A method for execution by a computing device of a storage network comprises:
dispersed storage error decoding, by the computing device, a plurality of sets of encoded data slices to recover a plurality of secure packages, wherein the plurality of secure packages include a plurality of encrypted data segments and a plurality of sets of encoded key slices, wherein at least a decode threshold number of encoded key slices of a set of encoded key slices of the plurality of sets of encoded key slices are appended to at least some of the encrypted data segments in accordance with an appending approach to produce a secure package of the plurality of secure packages, and wherein the encrypted data segments were not dispersed storage error encoded prior to the appending the at least a decode threshold number of encoded key slices to the at least some of the encrypted data segments;
splitting, by the computing device, the plurality of secure packages into the plurality of encrypted data segments and the plurality of sets of encoded key slices;
dispersed storage error decoding, by the computing device, the plurality of sets of encoded key slices to recover a plurality of encryption keys; and
decrypting, by the computing device, the plurality of encrypted data segments using the plurality of encryption keys to recover data segments.
|