BaselineWatch
Desk

8.1.5.3.1 Domain Parameters

NIST platform security: roots of trust, firmware and secure enclaves SP 800-57 Part 1 Rev. 4
All changes in this version
first version loaded 8 Key-Management Phases and Functions part of 8.1.5.3

Title

Domain Parameters

Control

Domain parameters are used by some public-key algorithms to generate key pairs, to compute digital signatures, or to establish keys. Typically, domain parameters are generated infrequently and used by a community of users for a substantial period of time. Domain parameters may be distributed in the same manner as the public keys with which they are associated, or they may be made available at some other accessible site. Assurance of the validity of the domain parameters shall be obtained prior to use, either by a trusted entity that vouches for the parameters (e.g., a CA), or by the entities themselves. Assurance of domain- parameter validity is addressed in [ SP800-89] and [SP800-56A] . Obtaining this assurance should be addressed in a CA’s certification practices statement or an organization's security plan.