BaselineWatch
Desk

6.2.1 Protection Mechanisms for Cryptographic Information in Transit

NIST platform security: roots of trust, firmware and secure enclaves SP 800-57 Part 1 Rev. 5 against SP 800-57 Part 1 Rev. 4
All changes in this version
removed 6 Training: If the new system requires that new or different tasks (e.g., key part of 6.2

Title changed

Before · SP 800-57 Part 1 Rev. 4

Protection Mechanisms for Cryptographic Information in Transit

After · SP 800-57 Part 1 Rev. 5

Protection Mechanisms for Cryptographic Information in Transit

Control changed

Before · SP 800-57 Part 1 Rev. 4

Cryptographic information in transit may be keying material that is being distributed in order to obtain a cryptographic service (e.g., establish a key that will be used to provide confidentiality) (see Section 8.1.5 ), cryptographic information that is being backed up or archived for possible use or recovery in the future (see Sections 8.2.2 and 8.3.1 ), or is in the process of being recovered (see Sections 8.2.2.2 , 8.3.1 and Appendix B ). This may be accomplished manually (i.e., via a trusted courier), in an automated fashion (i.e., using automated communication protocols) or by some combination of manual and automated methods. For some protocols, the protections are provided by the protocol; in other cases, the protection of the keying material is provided directly to the keying material (e.g., the keying material is encrypted prior to transmission for decryption only by the receiving party). It is the responsibility of the originating entity to apply protection mechanisms, and the responsibility of the recipient to undo or check the mechanisms used.

After · SP 800-57 Part 1 Rev. 5

Cryptographic information in transit may be keying material that is being distributed in order to obtain a cryptographic service (e.g., establish a key that will be used to provide confidentiality) (see Section 8.1.5 ), cryptographic information that is being backed up or archived for possible use or recovery in the future (see Sections 8.2.2 and 8.3.1 ), or is in the process of being recovered (see Sections 8.2.2.2 , 8.3.1 and Appendix B ). This may be accomplished manually (i.e., via a trusted courier), in an automated fashion (i.e., using automated communication protocols) or by some combination of manual and automated methods. For some protocols, the protections are provided by the protocol; in other cases, the protection of the keying material is provided directly to the keying material (e.g., the keying material is encrypted prior to transmission for decryption only by the receiving party). It is the responsibility of the originating entity to apply protection mechanisms, and the responsibility of the recipient to undo or check the mechanisms used.