BaselineWatch
Desk

6.2.3.1 Metadata for Keys

NIST platform security: roots of trust, firmware and secure enclaves SP 800-57 Part 1 Rev. 5 against SP 800-57 Part 1 Rev. 4
All changes in this version
removed 6 Training: If the new system requires that new or different tasks (e.g., key part of 6.2.3

Title changed

Before · SP 800-57 Part 1 Rev. 4

Metadata for Keys

After · SP 800-57 Part 1 Rev. 5

Metadata for Keys

Control changed

Before · SP 800-57 Part 1 Rev. 4

Metadata is used to provide information about the key, including its parameters, or the intended use of a key, and as such, contains the key’s control information. Different applications may require different metadata elements for the same key type, and different metadata elements may be required for different key types. It is the responsibility of an implementer to select suitable metadata elements for keys. When metadata is used, the metadata should accompany a key (i.e., the metadata is typically stored or transmitted with a key). Some examples of metadata elements are: 1. Key identifier; 2. Information identifying associated keys (e.g., the association between a public and private key); 3. Identity of the key’s owner or the sharing entity(ies); 4. Cryptoperiod (e.g., the start and end dates); 5. Key type (e.g., a signing private key, encryption key, or master key); 6. Application (e.g., purchasing or email); 7. Sensitivity of the information protected by the key;

After · SP 800-57 Part 1 Rev. 5

Metadata is used to provide information about the key, including its parameters, or the intended use of a key, and as such, contains the key’s control information. Different applications may require different metadata elements for the same key type, and different metadata elements may be required for different key types. It is the responsibility of an implementer to select suitable metadata elements for keys. When metadata is used, the metadata should accompany a key (i.e., the metadata is typically stored or transmitted with a key). Some examples of metadata elements are: 1. Key identifier; 2. Information identifying associated keys (e.g., the association between a public and private key); 3. Identity of the key’s owner or the sharing entity(ies); 4. Cryptoperiod (e.g., the start and end dates); 5. Key type (e.g., a signing private key, encryption key, or master key); 6. Application (e.g., purchasing or email); 7. Sensitivity of the information protected by the key;