Part 1: General - Computer Security Resource Center - National ...

Key Type Security
Service
Private
ephemeral key
agreement key
Public
ephemeral key
agreement key
Symmetric
authorization
keys
Private
authorization
key
Public
authorization
key
Security
Protection
Support Integrity;
Confidentiality
Association
Protection
Usage or
application;
Public ephemeral
key agreement key;
Domain parameters;
Support Integrity 25 Key pair owner;
Authorization Integrity;
Confidentiality
Authorization Integrity;
Confidentiality
Private ephemeral
key agreement key;
Usage or
application;
Domain parameters
Usage or
application;
Other authorized
entities
Usage or
application;
Public authorization
key;
Domain parameters
Authorization Integrity Usage or
application;
Key pair owner;
Private authorization
key;
Domain parameters
Assurances
Required
March, 2007
Period of Protection
From generation until the
end of the key agreement
process
After the end of the process
the key shall be destroyed
Validity From generation until the
key agreement process is
complete
From generation until the
end of the cryptoperiod of
the key
Possession From generation until the
end of the cryptoperiod of
the key
Validity From generation until the
end of the cryptoperiod of
the key
6.1.2 Summary of Protection Requirements for Other Cryptographic or Related
Information
Table 6 provides a summary of the protection requirements for other cryptographic information
during distribution and storage. Mechanisms for providing the necessary protection are discussed
in Section 6.2.
25 Public ephemeral key agreement keys are not generally protected during transmission; however, the key
agreement protocols may be designed to detect unauthorized substitutions and modifications to the transmitted
ephemeral public keys. In this case, the protocols form the data integrity mechanism.
76