8.2.3.1 Re-keying
NIST platform security: roots of trust, firmware and secure enclaves SP 800-57 Part 1 Rev. 4
All changes in this version
All changes in this version
Title
Re-keying
Control
If the new key is generated in a manner that is entirely independent of the “value” of the old key, the process is known as re-keying. This replacement shall be accomplished using one of the key-establishment methods discussed in Section 8.1.5 . Re-keying is used when a key has been compromised (provided that the re-keying scheme itself is not compromised) or when the cryptoperiod is nearing expiration.