How deeply does Real-World Cryptography cover key management?

Explains storage concerns, rotation, revocation, automation, and role separation, while deferring detailed revocation mechanisms to secure transport.

Key management

As explained in Real-World Cryptography

Key management is the lifecycle practice of generating, storing, using, rotating, revoking, and protecting cryptographic keys and secrets.

Key management keeps cryptographic keys and other secrets under control after they are generated: storing them, limiting their use, expiring them, rotating them, and responding when they are compromised. section 8.7 section 8.9

A practical defense-in-depth routine includes:

Rotate keys periodically so a compromised key has a limited useful lifetime. section 8.7
Revoke a key promptly when compromise is known, checking its status before use where supported. section 8.7
Automate rotation and revocation, and assign each key a narrow role to limit breach consequences. section 8.7

Separate keys by role

A system can use one public key only for signing transactions and another only for key exchange. Losing the second key then need not expose transaction signing. section 8.7

How Real-World Cryptography covers it

liveBook manning.com

Read Real-World Cryptography on liveBook Get the book at manning.com

Related concepts

automationuses · Automation is the execution of tasks or processes by machines or software with reduced direct human intervention.
key rotationhas part · Key rotation is the controlled replacement of cryptographic keys with new keys according to a defined security policy, schedule, or usage limit.
key management serviceuses · A key management service is a system that securely creates, stores, controls access to, rotates, and revokes cryptographic keys.
dashboardused by · A dashboard is a visual interface that consolidates selected data, metrics, or status information for monitoring, analysis, or decision-making.
managementkind of · Management is the organizational function or practice of directing people, work, resources, and operations to achieve objectives.

This explainer was generated by Manning's knowledge graph from the text of Real-World Cryptography. The section links point to the parts of the book it draws on.