摘要 |
A technique for managing encryption keys includes encrypting the contents of a piece of media with a first encryption key, encrypting the first encryption key with a second encryption key, and storing the encrypted first encryption key on or in connection with the piece of media. Encrypted data may be recovered by receiving the encrypted first encryption key from the piece of media, receiving the second encryption key (e.g., from a user to whom the key is assigned), recovering the first encryption key using the second encryption key, and decrypting the data from the piece of media using the first encryption key. |