Key Management

The activities involving the handling of cryptographic keys and other related security parameters (e.g., IVs and passwords) during the entire life cycle of the keys, including their generation, storage, establishment, entry and output, and zeroization.

1. Supervision and control of the process whereby key is generated, stored, protected, transferred, loaded, used, and destroyed. [INFOSEC-99] 2. The generation, storage, distribution, deletion, archiving and application of keys in accordance with a security policy [7498-2].