NISTIR 7298 Revision 1, Glossary of Key Information Security Terms

NIST IR 7298 Revision 1, Glossary of Key Information Security Terms
Key Updating – Irreversible cryptographic process for modifying key.
SOURCE: CNSSI-4009
Key Wrap – A method of encrypting keying material (along with associated
integrity information) that provides both confidentiality and integrity
protection using a symmetric key algorithm.
SOURCE: SP 800-56A
Key-Auto-Key (KAK) – Cryptographic logic using previous key to produce key.
SOURCE: CNSSI-4009
Key-Encryption-Key (KEK) – Key that encrypts or decrypts other key for transmission or storage.
SOURCE: CNSSI-4009
Keyed-hash based message
authentication code (HMAC) –
A message authentication code that uses a cryptographic key in
conjunction with a hash function.
SOURCE: FIPS 198; CNSSI-4009
Keying Material – Key, code, or authentication information in physical, electronic, or
magnetic form.
SOURCE: CNSSI-4009
Keystroke Monitoring – The process used to view or record both the keystrokes entered by a
computer user and the computer’s response during an interactive
session. Keystroke monitoring is usually considered a special case of
audit trails.
SOURCE: SP 800-12; CNSSI-4009
KMI Operating Account (KOA) – A KMI business relationship that is established 1) to manage the set
of user devices that are under the control of a specific KMI customer
organization, and 2) to control the distribution of KMI products to
those devices.
SOURCE: CNSSI-4009
KMI Protected Channel (KPC) – A KMI Communication Channel that provides 1) Information
Integrity Service; 2) either Data Origin Authentication Service or
Peer Entity Authentication Service, as is appropriate to the mode of
communications; and 3) optionally, Information Confidentiality
Service.
SOURCE: CNSSI-4009
Pg 109