6.2.1 Protection Mechanisms for Cryptographic Information in Transit
All changes in this version
Title changed
Before · SP 800-57 Part 1 Rev. 4
Protection Mechanisms for Cryptographic Information in Transit
After · SP 800-57 Part 1 Rev. 5
Protection Mechanisms for Cryptographic Information in Transit
Control changed
Before · SP 800-57 Part 1 Rev. 4
Cryptographic information in transit may be keying material that is being distributed in order to obtain a cryptographic service (e.g., establish a key that will be used to provide confidentiality) (see Section 8.1.5 ), cryptographic information that is being backed up or archived for possible use or recovery in the future (see Sections 8.2.2 and 8.3.1 ), or is in the process of being recovered (see Sections 8.2.2.2 , 8.3.1 and Appendix B ). This may be accomplished manually (i.e., via a trusted courier), in an automated fashion (i.e., using automated communication protocols) or by some combination of manual and automated methods. For some protocols, the protections are provided by the protocol; in other cases, the protection of the keying material is provided directly to the keying material (e.g., the keying material is encrypted prior to transmission for decryption only by the receiving party). It is the responsibility of the originating entity to apply protection mechanisms, and the responsibility of the recipient to undo or check the mechanisms used.
After · SP 800-57 Part 1 Rev. 5
Cryptographic information in transit may be keying material that is being distributed in order to obtain a cryptographic service (e.g., establish a key that will be used to provide confidentiality) (see Section 8.1.5 ), cryptographic information that is being backed up or archived for possible use or recovery in the future (see Sections 8.2.2 and 8.3.1 ), or is in the process of being recovered (see Sections 8.2.2.2 , 8.3.1 and Appendix B ). This may be accomplished manually (i.e., via a trusted courier), in an automated fashion (i.e., using automated communication protocols) or by some combination of manual and automated methods. For some protocols, the protections are provided by the protocol; in other cases, the protection of the keying material is provided directly to the keying material (e.g., the keying material is encrypted prior to transmission for decryption only by the receiving party). It is the responsibility of the originating entity to apply protection mechanisms, and the responsibility of the recipient to undo or check the mechanisms used.