+CON.1.A4 Appropriate Key Management (S)

CON.1.A4 Appropriate Key Management (S)

Cryptographic keys SHOULD always be created with appropriate key generators in a secure environment. If possible, cryptographic keys SHOULD be used for one purpose only. In particular, different keys SHOULD be used for encryption and signature creation. The exchange of cryptographic keys SHOULD be carried out using a method that is considered secure.

If keys are used, the authenticity of the origin and integrity of the key data SHOULD be checked.

All cryptographic keys SHOULD be changed at a sufficient frequency. There SHOULD be a defined procedure for scenarios in which a key has been revealed. All created cryptographic keys SHOULD be stored and managed securely.

1. Przegląd

1.1 Odwołania

1.2 Zidentyfikowane wymagania

1.3 Powiązane regulacje

2. Zidentyfikowane wymagania

Wymagania

3. Powiązane regulacje

Regulacje

Powiązane zgłoszenia

Powiązania
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.45 Data Loss