Inadequate key management may grant attackers access to encrypted data. For example, a lack of rules may result in keys and the associated encrypted information being stored on the same data storage medium or being transmitted (unencrypted) via the same communication channel. When symmetrical methods are used, every person who can access the data storage medium or communication channel in question will thus be able to decrypt the information if the encryption method used is known.
- BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)