+CON.1.A4 Appropriate Key Management (S)

CON.1.A4 Appropriate Key Management (S)

Cryptographic keys SHOULD always be created with appropriate key generators in a secure environment. If possible, cryptographic keys SHOULD be used for one purpose only. In particular, different keys SHOULD be used for encryption and signature creation. The exchange of cryptographic keys SHOULD be carried out using a method that is considered secure.

If keys are used, the authenticity of the origin and integrity of the key data SHOULD be checked.

All cryptographic keys SHOULD be changed at a sufficient frequency. There SHOULD be a defined procedure for scenarios in which a key has been revealed. All created cryptographic keys SHOULD be stored and managed securely.

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.45 Data Loss