Cryptographic Key
What is Cryptographic Key?
A piece of information used by a cryptographic algorithm to transform plaintext into ciphertext or vice versa. Key security is fundamental to the strength of any cryptographic system.
Terms that appear alongside cryptographic key
Each of these is named in at least one of the same controls as cryptographic key. The number is how many controls name both.
- key management 15 shared controls
- nist 6 shared controls
- encryption 5 shared controls
- authentication 4 shared controls
- audit 4 shared controls
- consent 4 shared controls
- iso 27001 3 shared controls
- information security 3 shared controls
Frameworks that govern cryptographic key
What the standards actually require on cryptographic key
Requirements naming cryptographic key across 6 standards, quoted from the control text.
Cryptographic keys must be kept in as few locations as possible. Guidance explains that this helps the entity track and monitor where keys reside and reduces the chance of exposure to unauthorized parties.
3.6.1.4 · 3.6.1.4 Cryptographic keys kept in fewest locations →Maintain availability of information in the event of the loss of cryptographic keys by users.
NIST800-SC-12(1) · SC-12(1) Cryptographic Key Establishment and Management | Availability →Agencies must replace compromised cryptographic keys urgently and must record that replacement in the incident reporting.
new-zealand-information-security-manual-nzism::7.2.24.C.01 · 7.2.24.C.01 Urgent replacement of compromised cryptographic keys →Cryptographic key management processes, and supporting cryptographic key management procedures, are developed, implemented and maintained.
ISM-0507 · Cryptographic key management processes →The key management part of the cryptographic policy must govern keys across their whole lifecycle: generation, renewal, storage, backup, archiving, retrieval, transmission, retirement, revocation and destruction.
dora-rts-on-ict-risk-management-framework-commission-delegated-regulation-eu-2024-1774::7 · Article 7: Cryptographic key management →Establish and manage cryptographic keys per FedRAMP requirements (FIPS-validated, key escrow/recovery as appropriate).
SC-12 · Cryptographic Key Establishment and Management →Questions people ask about cryptographic key
What is Cryptographic Key?
Why is Cryptographic Key important for compliance?
Which compliance frameworks address Cryptographic Key?
Where can I learn more about Cryptographic Key?
See how Cryptographic Key applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.