BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

7.5 Compromised State

NIST platform security: roots of trust, firmware and secure enclaves SP 800-57 Part 1 Rev. 5 against SP 800-57 Part 1 Rev. 4
All changes in this version
removed 7 Key States and Transitions part of 7

Title changed

Before · SP 800-57 Part 1 Rev. 4

Compromised State

After · SP 800-57 Part 1 Rev. 5

Compromised State

Control changed

Before · SP 800-57 Part 1 Rev. 4

Generally, keys are compromised when they are released to or determined by an unauthorized entity. A compromised key shall not be used to apply cryptographic protection to information. However, in some cases, a compromised key or a public key that corresponds to a compromised private key of a key pair may be used to process cryptographically protected information. For example, a signature may be verified to determine the integrity of signed data if its signature has been physically protected since a time before the compromise occurred. This processing shall be done only under very highly controlled conditions, where the users of the information are fully aware of the possible consequences. Note that keys retrieved from an archive may be in the compromised state. Transition 15: A compromised key should transition to the destroyed state when its use will no longer be allowed or needed. The date and time of the transition shall be recorded.

After · SP 800-57 Part 1 Rev. 5

Generally, keys are compromised when they are released to or determined by an unauthorized entity. A compromised key shall not be used to apply cryptographic protection to information. However, in some cases, a compromised key or a public key that corresponds to a compromised private key of a key pair may be used to process cryptographically protected information. For example, a signature may be verified to determine the integrity of signed data if its signature has been physically protected since a time before the compromise occurred. This processing shall be done only under very highly controlled conditions, where the users of the information are fully aware of the possible consequences. Note that keys retrieved from an archive may be in the compromised state. Transition 15: A compromised key should transition to the destroyed state when its use will no longer be allowed or needed. The date and time of the transition shall be recorded.