Key management product

{
  "id": "MLC-T-CYB-002349",
  "term": "Key management product",
  "field": "Cybersecurity",
  "definition": "1. A key management product is a cryptographic key (symmetric or asymmetric) or certificate used for encryption, decryption, digital signature, or signature verification; and other items, such as certificate revocation lists and compromised key lists, obtained by trusted means from the same source, which validate the authenticity of keys or certificates. Software that performs either a security or cryptographic function (e.g., keying material accounting and control, random number generation, cryptographic module verification) is also considered to be a cryptographic product.\n\n2. A symmetric or asymmetric cryptographic key, a public-key certificate and other related items (such as domain parameters, IVs, random numbers, certificate revocation lists and compromised key lists, and tokens) that are obtained by a trusted means from some source.",
  "references": [
    "NIST SP 800-57 Part 2 [Superseded]",
    "NIST SP 800-57 Part 2 Rev.1",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/key-management-product/"
}