Source: https://csrc.nist.gov/publications/detail/sp/800-57-part-1/rev-5/archive/2019-10-08
Timestamp: 2020-07-15 19:30:22
Document Index: 310808735

Matched Legal Cases: ['art 1', 'art 1', 'art 1', 'art 1', 'art 2', 'art 3', 'art 1', 'art 1', 'art 1', 'art 1']

SP 800-57 Part 1 Rev. 5 (Draft), Recommendation for Key Management: Part 1 – General | CSRC
Obsoleted on May 04, 2020 by SP 800-57 Part 1 Rev. 5.
Comments Due: December 6, 2019 (public comment period is CLOSED)
This document provides general guidance and best practices for the management of cryptographic keying material. Among other changes, this revision emphasizes the protection needed for the metadata associated with keys; includes discussions on access control, identity authentication, and inventory management for keys and certificates; and provides guidance consistent with Federal Information Processing Standards (FIPS) Publication 201, Personal Identity Verification (PIV) of Federal Employees and Contractors, and SP 800-63, Digital Identity Guidelines. Appendix C contains a complete list of changes.
This Recommendation provides cryptographic key-management guidance. It consists of three parts. Part 1 provides general guidance and best practices for the management of cryptographic keying material, including definitions of the security services that may be provided when using cryptography and the algorithms and key types that may be employed, specifications of the protection that each type of key and other cryptographic information requires and methods for providing this protection, discussions about the functions involved in key management, and discussions about a variety of key-management issues to be addressed when using cryptography. Part 2 provides guidance on policy and security planning requirements for U.S. Government agencies. Part 3 provides guidance when using the cryptographic features of current systems.
This Recommendation provides cryptographic key-management guidance. It consists of three parts. Part 1 provides general guidance and best practices for the management of cryptographic keying material, including definitions of the security services that may be provided when using cryptography and the... See full abstract
archive; assurances; authentication; authorization; availability; backup; compromise; confidentiality; cryptanalysis; cryptographic key; cryptographic module; digital signature; hash function; key agreement; key information; key-inventory management; key management; key management policy; key recovery; key transport; originator-usage period; private key; public key; recipient-usage period; secret key; split knowledge; trust anchor
SP 800-57 Part 1 Rev. 5 (Draft) (DOI)
10/08/19: SP 800-57 Part 1 Rev. 5 (Draft)
05/04/20: SP 800-57 Part 1 Rev. 5 (Final)