Part 1: General - Computer Security Resource Center - National ...

March, 2007
2 Glossary of Terms and Acronyms
The definitions provided below are defined as used in this document. The same terms may be
defined differently in other documents.
2.1 Glossary
Access control Restricts access to resources only to privileged entities.
Accountability A property that ensures that the actions of an entity may be traced
uniquely to that entity.
Algorithm Originator
Usage Period
Algorithm Security
Lifetime
The period of time during which a specific cryptographic algorithm
may be used by originators to apply protection to data.
The estimated time period during which data protected by a specific
cryptographic algorithm remains secure.
Approved FIPS-Approved and/or NIST-recommended. An algorithm or
technique that is either 1) specified in a FIPS or NIST
Recommendation, or 2) specified elsewhere and adopted by reference
in a FIPS or NIST Recommendation.
Archive To place information into long term storage after its normal period of
use has expired. See also Key management archive.
Association A relationship for a particular purpose. For example, a key is
associated with the application or process for which it will be used.
Assurance of (private
key) Possession
Confidence that an entity possesses a private key and its associated
keying material.
Assurance of validity Confidence that a public key or domain parameter is arithmetically
correct.
Asymmetric key
algorithm
See Public key cryptographic algorithm.
Attribute Information associated with a key that is not used in cryptographic
algorithms but is required to implement applications and applications
protocols.
Authentication A process that establishes the origin of information, or determines an
entity’s identity.
Authentication code A cryptographic checksum based on an Approved security function
(also known as a Message Authentication Code).
Authorization Access privileges that are granted to an entity; conveying an “official”
sanction to perform a security function or activity.
Availability Timely, reliable access to information by authorized entities.
19