Part 1: General - Computer Security Resource Center - National ...

Key Type Security
Service
Symmetric key
wrapping key
Symmetric and
asymmetric
RNG keys
Symmetric
master key
Security
Protection
Support Archive;
Integrity;
Confidentiality
Support Integrity;
Confidentiality
Support Archive;
Integrity;
Confidentiality
Association
Protection
Usage or
application;
Other authorized
entities;
Encrypted keys
Assurances
Required
Usage or application Possession of
private RNG
key if used
Usage or
application;
Other authorized
entities;
Derived keys
March, 2007
Period of Protection
From generation until the
end of the cryptoperiod or
no wrapped keys require
protection, whichever is
later.
From generation until
replaced
From generation until the
end of the cryptoperiod or
the end of the lifetime of the
derived keys, whichever is
later.
Private key Support Archive; Usage or Possession From generation until the
transport key
Integrity;
Confidentiality
application;
Encrypted keys;
Public key transport
key
end of the period of
protection for all transported
keys
Public key Support Integrity Usage or Validity From generation until the
transport key application; end of the cryptoperiod
Symmetric key
agreement key
Support Archive;
Integrity;
Confidentiality
Key pair owner;
Private key transport
key
Usage or
application;
Other authorized
entities
From generation until the
end of the cryptoperiod or
no longer needed to
determined a key,
whichever is later
Private static Support Archive; Usage or Possession From generation until the
key agreement
key
Integrity;
Confidentiality
application;
Domain parameters;
end of the cryptoperiod or
no longer needed to
determine a key, whichever
Public static key
agreement key
is later
Public static Support Archive; Usage or Validity From generation until the
key agreement
key
Integrity
application;
Key pair owner;
end of the cryptoperiod or
no longer needed to
determine a key, whichever
Domain parameters;
is later
Private static key
agreement key
75