Encryption Key
What is Encryption Key?
A string of bits used by a cryptographic algorithm to transform plaintext into ciphertext (encryption) or ciphertext back into plaintext (decryption).
Terms that appear alongside encryption key
Each of these is named in at least one of the same controls as encryption key. The number is how many controls name both.
- encryption 11 shared controls
- key management 8 shared controls
- fips 4 shared controls
- data at rest 3 shared controls
- tls 3 shared controls
- nist 3 shared controls
- ipsec 3 shared controls
- data in transit 2 shared controls
Frameworks that govern encryption key
What the standards actually require on encryption key
Requirements naming encryption key across 6 standards, quoted from the control text.
For wireless environments that connect to the CDE or carry account data, wireless encryption keys must be changed: (a) whenever someone who knows the key leaves the company or leaves the role for which that knowledge was needed;
2.3.2 · 2.3.2 Wireless encryption keys changed on triggers →Encryption key management follows defined processes covering obtaining or generating keys and storing them, managing expiry, revoking keys, securely changing the current keyset, and recovering data that was encrypted under a key since revoked or expired for a...
gli-33-gaming-laboratories-international-event-wagering-systems::B.6.3 · B.6.3 Encryption Key Management →The DSP has a policy or process governing the lifecycle of encryption keys to minimise the risk of key compromise, covering asymmetric (public key) algorithms, hashing algorithms and symmetric algorithms, with algorithm use aligned to the Australian Government...
ato-digital-service-provider-dsp-operational-security-framework::SEC.KEY · Encryption key management policy covering the key lifecycle →Apply Section 5.3 cryptography including: encryption of data at rest (AES-256 + FIPS 140-3 validated modules + full disk encryption + file-level encryption + database encryption) + data in transit (TLS 1.3 + IPsec + SSH 2.0 + S/MIME + PGP) + key management per...
NISTSP123-4 · Server Cryptography - Encryption, Key Management, Certificates →Apply Section 7 encryption and key management in cloud including: data at rest (provider-managed encryption + customer-managed encryption keys CMEK + Bring Your Own Key BYOK + Hold Your Own Key HYOK) + data in transit (TLS 1.3 + IPsec + mTLS) + data in use (co...
NISTSP144-4 · Encryption, Key Management, and BYOK →Manage cryptographic keys used for TT&C, payload data and ground links across generation, distribution, rotation and revocation.
SISAC-17 · Encryption Key Lifecycle for Space Systems →Questions people ask about encryption key
What is Encryption Key?
Why is Encryption Key important for compliance?
Which compliance frameworks address Encryption Key?
Where can I learn more about Encryption Key?
See how Encryption Key applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.