abstract ;;Quote: use smartcards for temporary escrow of file encryption keys; bilaterally auditable, past possession conveys no future privileges

28 ;;Quote: file encryption is fundamentally different from cryptographic communication; key management over time not space, lost keys corrupts files, low authentication needs

28 ;;Quote: a central locksmith is wrong for large-scale file encryption key management; must be trusted, key database critical, single point of failure

32 ;;Quote: implemented temporary escrow of file encryption keys by lazy evaluation with a smartcard; may be equivalent to 3-DES

34 ;;Quote: a encryption key owner may cheat any escrow system by encrypting data with a private key; escrow check file guards against mistakes, not deception