What is Cryptographic key management?
In short
Key management covers generating, distributing, storing, rotating, revoking and destroying the keys used for encryption. Whoever holds a key can read the data it protects.
Key takeaways
- Keys should be stored separately from the data they protect, often in dedicated hardware security modules.
- Keys should be rotated periodically and revoked if compromised.
- Backing up keys prevents data loss if they are lost.
Where it's tested
ISC: Information Security Fundamentals — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
To send a confidential message that only the intended recipient can read, which key should the sender use to encrypt it?