Method for the vehicle-internal management of cryptographic keys, comprising the steps of: - providing at least one secret (24, 24a, 24b) for a vehicle-internal key generation device (10, 10a, 10b); and - generating at least one new cryptographic key (26, 26a, 26b) by means of the vehicle-internal key generation device (10, 10a, 10b) on the basis of the at least one secret (24, 24a, 24b), - providing the at least one new cryptographic key (26, 26a, 26b) for at least one vehicle-internal control device (18a-18c); - using the at least one new cryptographic key (26, 26a, 26b) by means of the vehicle-internal control device (18a-18c) in cryptographic and/or non-cryptographic security measures (16a-16c), wherein - the generation of the at least one new cryptographic key (26, 26a, 26b) and/or the provision of the at least one new cryptographic key (26, 26a, 26b) is triggered by a key-exchange event (20, 20a-20c) or a combination of key-exchange events (20, 20a-20c), and/or takes place automatically, and the method is characterized by further steps, wherein - the key-exchange event is captured by a vehicle-internal monitoring unit, wherein the monitoring unit initiates the generation of the at least one new cryptographic key (26, 26a, 26b) and/or the provision of the at least one new cryptographic key (26, 26a, 26b), wherein the following further steps are carried out: - monitoring the provision and the distribution of new cryptographic keys (26, 26a, 26b) to one or more control devices (18a-18c) by means of the monitoring unit; - adapting the provision and the distribution of new cryptographic keys (26, 26a, 26b) to one or more control devices (18a-18c) by means of the monitoring unit. - providing at least one secret (24, 24a, 24b) for a vehicle-internal key generation device (10, 10a, 10b); and - generating at least one new cryptographic key (26, 26a, 26b) by means of the vehicle-internal key generation device (10, 10a, 10b) on the basis of the at least one secret (24, 24a, 24b), - providing the at least one new cryptographic key (26, 26a, 26b) for at least one vehicle-internal control device (18a-18c); - using the at least one new cryptographic key (26, 26a, 26b) by means of the vehicle-internal control device (18a-18c) in cryptographic and/or non-cryptographic security measures (16a-16c), wherein - the generation of the at least one new cryptographic key (26, 26a, 26b) and/or the provision of the at least one new cryptographic key (26, 26a, 26b) is triggered by a key-exchange event (20, 20a-20c) or a combination of key-exchange events (20, 20a-20c), and/or takes place automatically, and the method is characterized by further steps, wherein - the key-exchange event is captured by a vehicle-internal monitoring unit, wherein the monitoring unit initiates the generation of the at least one new cryptographic key (26, 26a, 26b) and/or the provision of the at least one new cryptographic key (26, 26a, 26b), - monitoring the provision and the distribution of new cryptographic keys (26, 26a, 26b) to one or more control devices (18a-18c) by means of the monitoring unit; - adapting the provision and the distribution of new cryptographic keys (26, 26a, 26b) to one or more control devices (18a-18c) by means of the monitoring unit.