Message Encryption

This is what happens behind the scenes when the user clicks ‘Encrypt’. Keygloo retrieves the email ids of the mail recipients. It then scans its internal address book to get their Keygloo numbers. If it is unable to find a particular email id, Keygloo prompts the user for the same. Once the Keygloo numbers are obtained, Keygloo sends a public key request to the key distribution server requesting public keys. The keygloo server responds with the public keys.

Keygloo now retrieves the message body, encrypts it using a randomly generated session key (256-bit AES key) and encrypts the session key using the recipient’s RSA public key.

The encrypted text thus contains the encrypted session keys, the encrypted text and the Keygloo numbers of the recipients along with a few other details to assist Keygloo in decrypting the message.