Secure environment for encryption key generation

An apparatus (102) for generating and storing cryptographic key pairs is disclosed. The apparatus includes a non-persistent memory unit (116) and a processor (114). The processor (114) is configured to receive a plurality of seeds from a respective plurality of users and combine the seeds to define a composite seed. The processor (114) is further configured to generate a key pair comprising a public key and a private key (104) using the composite seed and a deterministic key generation method, and to record the private key (104) in the non-persistent memory unit (116). 公开了一种用于生成和存储加密密钥对的装置(102)。该装置包括非永久内存单元(116)和处理器(114)。处理器(114)配置成从相应的多个用户接收多个种子并组合这些种子以定义复合种子。处理器(114)还配置成使用复合种子和确定性密钥生成方法来生成包括公开密钥和私人密钥(104)的密钥对，并将私人密钥(104)记录在非永久内存单元(116)中。