Patent ID: 8566913

Claim:
A computer program product for secure key management, the computer program product comprising: a non-transitory computer readable storage medium readable by a processing circuit and storing instructions for execution by the processing circuit for performing a method, comprising: populating a section of information associated with a key, the section of information being populated with information relating to a level of protection of the key accumulated over time, the information relating to the level of protection of the key further comprising records of key exposure that describe events that occur during a life of the key; the records of key exposure comprise at least one of the following: the key being unprotected, the key being wrapped with a second key weaker than the key, the key being wrapped with a key that is not trusted, the key being wrapped without key-type information bound to the key, and the key being encrypted using an insecure ciphering mode; and securely binding the section of information to the key, wherein the key is encrypted.