Part 1: General - Computer Security Resource Center - National ...

March, 2007
Transition 3: A key that is never used may transition from the pre-activation state to the
compromised state when the integrity of a key or the confidentiality of a key
requiring confidentiality protection becomes suspect before first use.
Transition 4: Keys transition from the pre-activation state to the active state when the key
becomes available for use. This transition may be activated after reaching an
activation date or by an external event. In the case where keys are generated
for immediate use, this transition occurs immediately after entering the preactivation
state.
This transition marks the beginning of a key’s cryptoperiod (see Section 5.3).
Transition 5: An active key may transition from the active state to the compromised state
when the integrity of a key or the confidentiality of a key requiring
confidentiality protection becomes suspect. Generally, keys are compromised
when they are released to or determined by an unauthorized entity.
Transition 6: An active key may transition to the deactivated state if it is no longer to be
used to apply cryptographic protection to data or no longer intended to be
used to process cryptographically protected data. A key may transition from
the active state to the deactivated state as a result of a revocation action (see
Section 8.3.5) for a reason other than a key compromise, or if the key is
replaced (see Section 8.2.3), or at the end of the key’s cryptoperiod (see
Sections 5.3.4).
Transition 7: Assuming that a key is not determined to be compromised while in the
deactivated state, a key may transition from the deactivated state to the
destroyed state. In general, a key transitions to the destroyed state as soon as it
is no longer needed
Transition 8: A deactivated key transitions from the deactivated state to the compromised
state when the integrity of a key or the confidentiality of a key requiring
confidentiality protection becomes suspect. Generally, keys are compromised
when they are released to or determined by an unauthorized entity.
Transition 9: A key in the compromised state may transition to the destroyed compromised
state when the key is no longer needed to process data.
Transition 10: A destroyed key transitions to the destroyed compromised state if it is
determined that the key was previously compromised. Although the key itself
has already been destroyed, transition to the destroyed compromised state
marks the remaining key attributes to indicate a key compromise.
7.3 States and Transitions for Asymmetric Keys
The preceding discussion of key states and transitions applies to both symmetric and asymmetric
keys; however, some observations that are specific to asymmetric keys are in order.
Asymmetric keys that are or will be certified are in the pre-activation state until certified or until
the “not before” date specified in a certificate has passed. The types of transitions for asymmetric
keys depend on the key type. Examples of transitions follow:
87