BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

8.1.5 Key Establishment Function

NIST platform security: roots of trust, firmware and secure enclaves SP 800-57 Part 1 Rev. 4
All changes in this version
first version loaded 8 Key-Management Phases and Functions part of 8.1

Title

Key Establishment Function

Control

Key establishment involves the generation and distribution, or the agreement of keying material for communication between entities. All keys shall be generated within a FIPS 140- validated cryptographic module or obtained from another source approved by the U.S. Government for the protection of national security information. During the key-establishment process, some of the keying material may be in transit (i.e., the keying material is being manually distributed or is being distributed using automated protocols). Other keying material may be retained locally. In either case, the keying material shall be protected in accordance with Section 6 . An entity may be an individual (person), organization, device or process. When keying material is generated by an entity for its own use, one or more of the appropriate protection mechanisms for stored information in Section 6.2.2 shall be used. Keying material that is distributed between entities, or among an entity and its sub-entities (e.g., various individuals, devices or processes within an organization), shall be protected during distribution using one or more of the appropriate protection mechanisms specified in Section 6.2.1 . Any keying material that is not distributed (e.g., the private key of a key pair, or one's own copy of a symmetric key) or keying material that is received and subsequently stored shall be protected using one or more of the appropriate protection mechanisms specified in Section 6.2.2 . [SP800-133] discusses the generation of keying material.