Part 1: General - Computer Security Resource Center - National ...

March, 2007
a. A private signature key is not retained in the deactivated state, but transitions
immediately to the destroyed state.
b. A private signature key transitioning from the active state to the compromised state is not
retained in that state, but transitions immediately to the destroyed-compromised state
unless retention is required for legal purposes.
c. A public signature verification key may transition to the deactivated state at the end of
the corresponding private key’s cryptoperiod. The public signature verification key enters
the compromised state if its integrity becomes suspect. However, public signature
verification keys need not be destroyed.
d. A public key transport key transitioning from the active state is not retained in the
deactivated state, but transitions immediately to the destroyed state. It enters the
compromised state only when its integrity is suspect.
e. Private and public key agreement keys transitioning from the active state are not retained
in the deactivated state, but transition immediately to the destroyed state.
88