BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

6.2 Protection Mechanisms

NIST platform security: roots of trust, firmware and secure enclaves SP 800-57 Part 1 Rev. 5 against SP 800-57 Part 1 Rev. 4
All changes in this version
removed 6 Training: If the new system requires that new or different tasks (e.g., key part of 6

Title changed

Before · SP 800-57 Part 1 Rev. 4

Protection Mechanisms

After · SP 800-57 Part 1 Rev. 5

Protection Mechanisms

Control changed

Before · SP 800-57 Part 1 Rev. 4

During the lifetime of cryptographic information, the information is either “in transit” (e.g., is in the process of being manually distributed or distributed using automated protocols to the authorized communication participants for use by those entities), “at rest” (e.g., the information is in storage) or “in use.” In all cases, the keying material shall be protected in accordance with Section 6.1 . For keys that are in use, the keys shall reside (and be used) within appropriate cryptographic modules; note that a key being in use does not preclude that key from also being simultaneously in transit and/or in storage. While in transit or in storage, the choice of protection mechanisms may vary. Although several methods of protection are provided in the following subsections, not all methods provide equal security. The method should be carefully selected. In addition, the mechanisms prescribed do not, by themselves, guarantee protection. The implementation and the associated key management need to provide adequate security to prevent any feasible attack from being successful.

After · SP 800-57 Part 1 Rev. 5

During the lifetime of cryptographic information, the information is either “in transit” (e.g., is in the process of being manually distributed or distributed using automated protocols to the authorized communication participants for use by those entities), “at rest” (e.g., the information is in storage) or “in use.” In all cases, the keying material shall be protected in accordance with Section 6.1 . For keys that are in use, the keys shall reside (and be used) within appropriate cryptographic modules; note that a key being in use does not preclude that key from also being simultaneously in transit and/or in storage. While in transit or in storage, the choice of protection mechanisms may vary. Although several methods of protection are provided in the following subsections, not all methods provide equal security. The method should be carefully selected. In addition, the mechanisms prescribed do not, by themselves, guarantee protection. The implementation and the associated key management need to provide adequate security to prevent any feasible attack from being successful.