Part 1: General - Computer Security Resource Center - National ...

March, 2007
8. Domain parameters (e.g., the domain parameters used by DSA or ECDSA, or a pointer to
them)
9. Status or state of the key
10. Key encrypting key identifier (e.g., key wrapping key identifier, algorithm for the key
wrapping algorithm, etc.)
11. Integrity protection mechanism (e.g., key and algorithm used to provide cryptographic
protection, and protection code (e.g., MAC, digital signature))
12. Other information (e.g., length of the key, protection requirements, who has access rights,
additional conditions for use)
6.2.3.2 Labels for Related Cryptographic Information
Cryptographic information other than keying material may need a label to “point to” the keying
material that was used to provide the cryptographic protection for the information. The label may
also contain other related cryptographic information. When labels are used, the label should
accompany the information (i.e., is typically stored or transmitted with the information) and
contain some subset of the following information:
1. The type of information (e.g., domain parameters)
2. Source of the information (e.g., the entity that sent the information)
3. Application (e.g., purchasing, email)
4. Other associated cryptographic information (e.g., a key, MAC or hash value)
5. Any other information (e.g., who has access rights).
84