NISTIR 7298 Revision 1, Glossary of Key Information Security Terms

NIST IR 7298 Revision 1, Glossary of Key Information Security Terms
Secret Key (symmetric)
Cryptographic Algorithm –
A cryptographic algorithm that uses a single secret key for both
encryption and decryption.
SOURCE: FIPS 140-2
A cryptographic algorithm that uses a single key (i.e., a secret key)
for both encryption and decryption.
SOURCE: CNSSI-4009
Secret Seed – A secret value used to initialize a pseudorandom number generator.
SOURCE: CNSSI-4009
Secure/Multipurpose Internet Mail
Extensions (S/MIME) –
A set of specifications for securing electronic mail. S/MIME is based
upon the widely used MIME standard [MIME] and describes a
protocol for adding cryptographic security services through MIME
encapsulation of digitally signed and encrypted objects. The basic
security services offered by S/MIME are authentication, nonrepudiation
of origin, message integrity, and message privacy.
Optional security services include signed receipts, security labels,
secure mailing lists, and an extended method of identifying the
signer’s certificate(s).
SOURCE: SP 800-49; CNSSI-4009
Secure Communication Protocol – A communication protocol that provides the appropriate
confidentiality, authentication, and content integrity protection.
SOURCE: SP 800-57; CNSSI-4009
Secure Communications – Telecommunications deriving security through use of NSA-approved
products and/or Protected Distribution Systems.
SOURCE: CNSSI-4009
Secure DNS (SECDNS) –
Configuring and operating DNS servers so that the security goals of
data integrity and source authentication are achieved and maintained.
SOURCE: SP 800-81
Secure Erase – An overwrite technology using firmware-based process to overwrite
a hard drive. Is a drive command defined in the ANSI ATA and
SCSI disk drive interface specifications, which runs inside drive
hardware. It completes in about 1/8 the time of 5220 block erasure.
SOURCE: SP 800-88
Secure Hash Algorithm (SHA) –
A hash algorithm with the property that is computationally infeasible
1) to find a message that corresponds to a given message digest, or 2)
to find two different messages that produce the same message digest.
SOURCE: CNSSI-4009
Pg 166