Part 1: General - Computer Security Resource Center - National ...

March, 2007
4.2.4.1 DSA......................................................................................................37
4.2.4.2 RSA......................................................................................................37
4.2.4.3 ECDSA ................................................................................................37
4.2.5 Key Establishment Schemes...............................................................................38
4.2.5.1 Discrete Log Key Agreement Schemes Using Finite Field Arithmetic38
4.2.5.2 Discrete Log Key Agreement Schemes Using Elliptic Curve
Arithmetic ............................................................................................39
4.2.5.3 RSA Key Transport..............................................................................39
4.2.5.4 Key Wrapping......................................................................................39
4.2.5.5 Key Confirmation ................................................................................39
4.2.6 Key Establishment Protocols ..............................................................................39
4.2.7 Random Number Generation ..............................................................................40
5 GENERAL KEY MANAGEMENT GUIDANCE................................................................41
5. 1 Key Types and Other Information ..................................................................................41
5.1.1 Cryptographic Keys ............................................................................................41
5.1.2 Other Cryptographic or Related Information......................................................43
5.2 Key Usage.......................................................................................................................44
5.3 Cryptoperiods..................................................................................................................44
5.3.1 Risk Factors Affecting Cryptoperiods ................................................................45
5.3.2 Consequence Factors Affecting Cryptoperiods ..................................................46
5.3.3 Other Factors Affecting Cryptoperiods ..............................................................46
5.3.3.1 Communications versus Storage..........................................................46
5.3.3.2 Cost of Key Revocation and Replacement ..........................................46
5.3.4 Cryptoperiods for Asymmetric Keys..................................................................46
5.3.5 Symmetric Key Usage Periods and Cryptoperiods.............................................47
5.3.6 Cryptoperiod Recommendations for Specific Key Types ..................................49
5.3.7 Recommendations for Other Keying Material....................................................56
5.4 Assurances ......................................................................................................................57
5.4.1 Assurance of Integrity (Also Integrity Protection) .............................................57
5.4.2 Assurance of Domain Parameter Validity ..........................................................57
5.4.3 Assurance of Public Key Validity.......................................................................57
5.4.4 Assurance of Private Key Possession .................................................................57
5.5 Compromise of Keys and other Keying Material...........................................................58
8