Cryptographic Key
What is Cryptographic Key?
A piece of information used by a cryptographic algorithm to transform plaintext into ciphertext or vice versa. Key security is fundamental to the strength of any cryptographic system.
Terms that appear alongside cryptographic key
Each of these is named in at least one of the same controls as cryptographic key. The number is how many controls name both.
- key management 15 shared controls
- nist 6 shared controls
- encryption 5 shared controls
- authentication 4 shared controls
- audit 4 shared controls
- consent 4 shared controls
- iso 27001 3 shared controls
- information security 3 shared controls
Frameworks that govern cryptographic key
What the standards actually require on cryptographic key
Requirements naming cryptographic key across 6 standards, quoted from the control text.
Access to secret and private cryptographic keys and key material must be restricted to a small number of designated key custodians on a need-to-know basis with enforced dual control.
CO-17 · Access to Secret and Private Cryptographic Keys and Key Material Is Restricted →Access to cleartext cryptographic key components is restricted to the fewest custodians necessary.
3.6.1.3 · Access to cryptographic keys restricted →Establish and manage cryptographic keys using NIST-approved key management technology and processes.
FEDRAMP-SC-12 · Cryptographic Key Establishment and Management →Cryptographic key management processes, and supporting cryptographic key management procedures, are developed, implemented and maintained.
ISM-0507 · Cryptographic key management processes, and supporting cryptographic key management proced →Establish and manage cryptographic keys per FedRAMP requirements (FIPS-validated, key escrow/recovery as appropriate).
SC-12 · Cryptographic Key Establishment and Management →Establish and manage cryptographic keys per FedRAMP requirements (FIPS-validated, key escrow/recovery as appropriate).
SC-12 · Cryptographic Key Establishment and Management →Questions people ask about cryptographic key
What is Cryptographic Key?
Why is Cryptographic Key important for compliance?
Which compliance frameworks address Cryptographic Key?
Where can I learn more about Cryptographic Key?
See how Cryptographic Key applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.