Part 1: General - Computer Security Resource Center - National ...

March, 2007
B.3.13.2 Public Authorization Keys.................................................................134
B.3.14 Other Cryptographically Related Material........................................................134
B.3.14.1 Domain Parameters............................................................................135
B.3.14.2 Initialization Vectors (IVs) ................................................................135
B.3.14.3 Shared Secrets....................................................................................135
B.3.14.4 RNG Seeds.........................................................................................135
B.3.14.5 Other Public Information ...................................................................135
B.3.14.6 Intermediate Results...........................................................................135
B.3.14.7 Key Control Information....................................................................136
B.3.14.8 Random Numbers ..............................................................................136
B.3.14.9 Passwords...........................................................................................136
B.3.14.10 Audit Information ..................................................................136
B.4 Key Recovery Systems .................................................................................................136
B.5 Key Recovery Policy ....................................................................................................137
APPENDIX C: REFERENCES................................................................................................139
APPENDIX D: REVISIONS.....................................................................................................141
Tables
Table 1: Recommended Cryptoperiods for key types................................................................... 55
Table 2: Comparable strengths ..................................................................................................... 63
Table 3: Hash function security strengths for cryptographic applications ................................... 64
Table 4: Recommended algorithms and minimum key sizes ....................................................... 66
Table 5: Protection requirements for cryptographic keys............................................................. 74
Table 6: Protection requirements for other cryptographic or related material.............................. 77
Table 7: Backup of keys ............................................................................................................. 104
Table 8: Backup of other cryptographic or related information ................................................. 105
Table 9: Archive of keys............................................................................................................. 109
Table 10: Archive of other cryptographic related information................................................... 111
Figures
Figure 1: Symmetric key cryptoperiod (Example C).................................................................... 48
Figure 2: Algorithm Originator Usage Period Example............................................................... 70
13