The present invention provides secure communication from one encryption domain
to another using a trusted module. In one embodiment, the invention includes receiving
a first key for decryption of encrypted content over a secure authenticated channel,
receiving a second key for re-encrypting the encrypted content over a secure authenticated
channel. The invention further includes receiving the encrypted content, decrypting
and re-encrypting the encrypted content using the first key and the second key,
and conveying the re-encrypted content to a sink.