Part 1: General - Computer Security Resource Center - National ...

March, 2007
may be applied only to the cryptographic information, or may be applied to an entire
message,
-OR-
(b) The keying material is used to perform the intended cryptographic operation. If the
use of the keying material produces incorrect results, or the data is inconsistent in the
context of the application, then the received keying material may have been
corrupted.
The response to the detection of an integrity failure will vary depending on the specific
environment. Improper error handling can allow attacks (e.g., side channel attacks). A security
policy (see Part 2) should define the response to such an event. For example, if an error is
detected in the received information, and the receiver requires that the information is entirely
correct (e.g., the receiver cannot proceed when the information is in error), then:
a. the information should not be used,
b. the recipient may request that the information be resent (retransmissions should be
limited to a predetermined number of times), and
c. information related to the incident may be stored in an audit log to later identify the
source of the error.
6.2.1.3 Confidentiality
Keying material may require confidentiality protection during transit. If confidentiality
protection is required, the keying material shall be protected using one or more of the following
mechanisms:
1. Manual method:
(a) The keying material is encrypted,
-OR-
(b) The keying material is separated into key components. Each key component is
handled, using split knowledge procedures (see Sections 8.1.5.2.1 and 8.1.5.2.2.1), so
that no single individual can acquire access to all key components.
-OR-
(c) Appropriate physical and procedural protection is provided (e.g., by using a trusted
courier).
2. Electronic distribution via communication protocols: The keying material is encrypted.
6.2.1.4 Association with Usage or Application
The association of keying material with its usage or application shall be either specifically
identified during the distribution process or be implicitly defined by the use of the application.
See Section 6.2.3 for guidance on labeling.
80