Key management

Key management is a term used to describe two different fields; (1) cryptography, and (2) physical key management (or electronic key management) within building or campus access control.

In cryptography, key management includes all of the provisions made in a cryptosystem design, in cryptographic protocols in that design, in user procedures, and so on, which are related to generation, exchange, storage, safeguarding, use, vetting, and replacement of keys. There is a distinction between key management, which concerns keys at the users' level (i.e., passed between systems or users or both), and key scheduling which is usually taken to apply to the handling of key material within the operation of a cipher.

When referring to access control, electronic key management (physical key management)refers to a system for managing the possession, location and use of mechanical (physical keys) within a building or campus, to aid in security and operations efficiency.

Appropriate and successful key management is critical to the secure use of every crypto system without exception. It is, in actual practice, the most difficult aspect of cryptography generally, for it involves system policy, user training, organizational and departmental interactions in many cases, coordination between end users, etc.

Many of these concerns are not limited to cryptographic engineering and so are outside a strictly cryptographic brief, though of critical importance. As a result, some aspects of key management fall between two stools as the cryptographers may assume this or that aspect is the responsibility of the using department or upper management or some such, while said department or upper management regard it all as being outside their concerns because 'technical', and so within the purview of the cryptographers.

ee also

* Public key infrastructure
* NSA's Electronic Key Management System (EKMS)
* Cryptographic key types
* Assorted list of cryptographic key types
* Physical key management(or electronic key management)

Organizations Supplying Key Management Solutions

* [http://www.safenet-inc.com/products/database_encryption/DataSecure_i430_appliance.asp Safenet KeySecure, DataSecure and EdgeSecure Appliances] - Safenet DataSecure and Key Management Products (mainly for [Personally identifiable information PII] Protection as well as PCI DSS compliance)
* Bell ID - ANDiS Key Management System
* Futurex - [http://www.futurex.com Excrypt Key Management] Products
* [http://www.ncipher.com nCipher] - keyAuthority Key Management Products
* Trusted Security Solutions, Inc.- Developers of the A98 initial ATM Key Establishment System.
* Voltage (company) - Voltage Security key management products (mainly for PCI DSS compliance)
* [http://www.jsanetworks.com JSA Networks] - JSA Networks Key Management Server - Top Selling for PCI/CISP Compliance

External links

* "Recommendation for Key Management — Part 1: general," [http://csrc.nist.gov/publications/nistpubs/800-57/SP800-57-Part1.pdf NIST Special Publication 800-57]
* [http://csrc.nist.gov/CryptoToolkit/ NIST "Cryptographic Toolkit"]
* [https://siswg.net/ "The IEEE Security in Storage Working Group (SISWG) that is creating the P1619.3 standard for Key Management"]
* [http://www.ansi.org/ " Anerican National Standards Insitute] - ANSI X9.24, Retail Financial Services Symmetric Key Management