BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

5 A compromise of a key’s association with other information means that there is no (was: General Key Management Guidance)

NIST platform security: roots of trust, firmware and secure enclaves SP 800-57 Part 1 Rev. 5 against SP 800-57 Part 1 Rev. 4
All changes in this version
modified 5 A compromise of a key’s association with other information means that there is no

Title changed

Before · SP 800-57 Part 1 Rev. 4

General Key Management Guidance

After · SP 800-57 Part 1 Rev. 5

GeneralA Keycompromise Managementof Guidancea key’s association with other information means that there is no

Control changed

Before · SP 800-57 Part 1 Rev. 4

This section classifies the different types of keys and other cryptographic information according to their uses; discusses cryptoperiods and recommends appropriate cryptoperiods for each key type; provides recommendations and requirements for other keying material; introduces assurance of domain-parameter validity, public-key validity, and private-key possession; discusses the implications of the compromise of keying material; and provides guidance on the selection, implementation, and replacement of cryptographic algorithms and key sizes according to their security strengths.

5. 1 Key Types and Other Information There are several different types of cryptographic keys, each used for a different purpose. In addition, there is other information that is specifically related to cryptographic algorithms and keys. 5.1.1 Cryptographic Keys Several different types of keys are defined. The keys are identified according to their classification as public, private or symmetric keys, and as to their use. For public and private key-agreement keys, their status as static or ephemeral keys is also specified. See Table 5 in Section 6.1.1 for the required protections for each type of information.

After · SP 800-57 Part 1 Rev. 5

Thisassociation sectionat classifiesall theor differentthat typesthe ofassociation keysis andwith otherthe cryptographicwrong information according to their uses; discusses cryptoperiods and recommends appropriate cryptoperiods for each key type; provides recommendations and requirements for other keying. material;This introducescould assurancecause ofthe domain-parametercryptographic validity,services public-keyto validityfail, and private-key possession;information discussesto thebe implicationslost, ofor the compromisesecurity of keying material; and provides guidance on the selection, implementation, and replacement of cryptographic algorithms and key sizes accordinginformation to theirbe securitycompromised. strengths5.

5.2 1Protective KeyMeasures TypesCertain andprotective Othermeasures Informationmay Therebe aretaken severalin differentorder typesto ofminimize cryptographicthe keys,likelihood eachor usedconsequences forof a differentkey purposecompromise. In addition, there is other information that is specifically relatedThe tofollowing cryptographicprocedures algorithmsare andusually keys.involved: 5.1.1 Cryptographic Keys SeveralLimiting differentthe typesamount of keys are defined. The keys are identified according to their classification astime public,that privatea orsecret symmetric keys, and as to their use. For publicor andasymmetric private key-agreement keys, their status as static or ephemeral keyskey is also specified. Seein Tableplaintext 5form; in2. SectionPreventing 6.1.1humans forfrom theviewing requiredplaintext protectionssecret forsymmetric eachand typeasymmetric ofprivate information.keys;