Part 1: General - Computer Security Resource Center - National ...

March, 2007
8.2.3.1 Re-keying...........................................................................................106
8.2.3.2 Key Update Function .........................................................................106
8.2.4 Key Derivation Function...................................................................................107
8.3 Post-Operational Phase .................................................................................................108
8.3.1 Archive Storage and Key Recovery Functions.................................................108
8.3.2 Entity De-registration Function ........................................................................111
8.3.3 Key De-registration Function ...........................................................................112
8.3.4 Key Destruction Function.................................................................................112
8.3.5 Key Revocation Function .................................................................................112
8.4 Destroyed Phase............................................................................................................113
9 ACCOUNTABILITY, AUDIT, AND SURVIVABILITY .................................................113
9.1 Accountability...............................................................................................................114
9.2 Audit .............................................................................................................................114
9.3 Key Management System Survivability .......................................................................115
9.3.1 Back-up Keys....................................................................................................115
9.3.2 Key Recovery....................................................................................................115
9.3.3 System Redundancy/Contingency Planning.....................................................115
9.3.3.1 General Principles..............................................................................116
9.3.3.2 Cryptography and Key Management-specific Recovery Issues ........117
9.3.4 Compromise Recovery......................................................................................117
10KEY MANAGEMENT SPECIFICATIONS FOR CRYPTOGRAPHIC DEVICES OR
APPLICATIONS...................................................................................................................119
10.1 Key Management Specification Description/Purpose ..................................................119
10.2 Content of the Key Management Specification............................................................120
10.2.1 Cryptographic Application................................................................................120
10.2.2 Communications Environment .........................................................................120
10.2.3 Key Management Component Requirements ...................................................120
10.2.4 Key Management Component Generation........................................................121
10.2.5 Key Management Component Distribution......................................................121
10.2.6 Keying Material Storage...................................................................................121
10.2.7 Access Control..................................................................................................121
10.2.8 Accounting........................................................................................................121
11