How Asymmetric Key Generation/Distribution works

Jumble provides a secure email service in two ways:
  • Firstly, by creating and distributing encryption keys needed to secure your email via our key API
  • And secondly, by providing a software program (currently a Google Chrome browser extension) that uses these keys to secure your email
Any client can consume the API and request public and private keys:
  • Public keys are issued on-demand to anyone
  • Private keys are issued only to authorized individuals
  • Private keys are encrypted, only the users’ password can decrypt the private key
Key-pairs are uniquely associated with your email address and Jumble will generate a new key-pair for a specified email address when it’s not already available.
Jumble uses global data encryption standards; in fact Jumble uses 2 different sets of encryption keys for each email you send:
  1. A random single-use AES key is created for each email sent; this key is used to encrypt the actual email
  2. A set of RSA keys, called a key-pair, is uniquely associated with your email address and these keys secure the single-use AES key. Jumble generates a new RSA key-pair for a given email address when it’s not already available from the Jumble API but only releases the private section of the key-pair to someone who can prove they own the email address linked with the key-pair.

How Jumble Encryption Works

Jumble uses standard encryption algorithms that have been published and peer reviewed over many years. Specifically, 256-bit AES keys are employed to encrypt the email data and then use a 2048-bit RSA public key to encrypt the AES key. All data is encrypted in the browser, which means nobody, including Jumble, ever sees your data; Jumble provides real end-to-end secure email.

Proving ownership of an email address

  1. Once you register with Jumble, you will be sent an activation email to the address you provided with a link containing a single-use activation key.
  2. Clicking this link will activate your account and show Jumble that you are able to access the email account linked with the address you registered with.