government agencies for protecting sensitive, unclassified information - NIST’s work provides a valuable synthesis of best practices. Initially written as a guideline for the application within U.S. Our structure is based on NIST ’s Special Publication 800-57 Part 1, Revision 4 – “Recommendation for Key Management, Part 1”. This article wants to shed light on the cryptographic algorithms (the mechanisms, and protocols associated with the keys) and aims to provide an executive summary of what is to be considered when choosing cryptographic algorithms to secure a system. Strong algorithms combined with poor key management are as likely to fail as poor algorithms embedded in a strong key management context. The cryptographic protection of a system against attacks and malicious penetration depends on two dimensions: (1) The strength of the keys and the effectiveness of mechanisms and protocols associated with the keys and (2) the protection of the keys through key management (secure key generation, storage, distribution, use and destruction).
0 kommentar(er)
