key

{
  "id": "MLC-T-CYB-002313",
  "term": "key",
  "field": "Cybersecurity",
  "definition": "1. A parameter used in conjunction with a cryptographic algorithm that determines the specific operation of that algorithm.\n\n2. A bit string used as a secret parameter by a cryptographic algorithm. In this Recommendation, a cryptographic key is either a random bit string of a length specified by the cryptographic algorithm or a pseudorandom bit string of the required length that is computationally indistinguishable from one selected uniformly at random from the set of all bit strings of that length.\n\n3. A parameter used with a cryptographic algorithm that determines its operation.\n\n4. The parameter of a block cipher that determines the selection of a permutation from the block cipher family.\n\n5. A parameter used in conjunction with a cryptographic algorithm that determines its operation in such a way that an entity with knowledge of the key can reproduce or reverse the operation, while an entity without knowledge of the key cannot.\n\n6. A bit string that is used in conjunction with a cryptographic algorithm, such as the encapsulation and decapsulation keys (of a KEM), the shared secret key (produced by a KEM), and the encryption and decryption keys (of a PKE).\n\n7. A parameter used in conjunction with a cryptographic algorithm that determines its operation. Examples of cryptographic algorithms applicable to this standard include:\n1. The computation of a digital signature from data\n2. The verification of a digital signature\n\n8. A parameter used in conjunction with a cryptographic algorithm that deter-mines its operation. Examples of cryptographic algorithms applicable to this standard include:\n1. The computation of a digital signature from data\n2. The verification of a digital signature\n\n9. A parameter used in the block cipher algorithm that determines the forward cipher operation and the inverse cipher operation.\n\n10. A value used to control cryptographic operations, such as decryption, encryption, signature generation, or signature verification. For the purposes of these guidelines, key requirements shall meet the minimum requirements stated in Table 2 of [SP 800-57 Part1].\n\n11. A numerical value used to control cryptographic operations, such as decryption, encryption, signature generation, or signature verification. Usually a sequence of random or pseudorandom bits used initially to set up and periodically change the operations performed in cryptographic equipment for the purpose of encrypting or decrypting electronic signals, or for determining electronic counter-countermeasures (ECCM) patterns, or for producing other key.\n\n12. A parameter used in conjunction with a cryptographic algorithm that determines its operation.\nExamples applicable to this Standard include:\n1. The computation of a digital signature from data, and\n2. The verification of a digital signature.\n\n13. A parameter used in conjunction with a cryptographic algorithm that determines its operation. Examples applicable to this Recommendation include: 1. The computation of a digital signature from data, and 2. The verification of a digital signature.\n\n14. A parameter used with a cryptographic algorithm that determines its operation in such a way that an entity with knowledge of the key can reproduce or reverse the operation, while an entity without knowledge of the key cannot. Examples applicable to this Recommendation include:\n1. The computation of a keyed-hash message authentication code.\n2. The verification of a keyed-hash message authentication code.\n3. The generation of a digital signature on a message.\n4. The verification of a digital signature.\n\n15. A binary string used as a secret parameter by a cryptographic algorithm. In this Recommendation, a cryptographic key shall be either a truly random binary string of a length specified by the cryptographic algorithm or a pseudorandom binary string of the specified length that is computationally indistinguishable from one selected uniformly at random from the set of all binary strings of that length.\n\n16. A cryptographic key that can be directly used by a cryptographic algorithm to perform a cryptographic operation.\n\n17. A parameter that determines the transformation from plaintext to ciphertext and vice versa. (A DEA key is a 64-bit parameter consisting of 56 independent bits and 8 parity bits). Multiple (1, 2 or 3) keys may be used in the Triple Data Encryption Algorithm.\n\n18. The parameter of the block cipher that determines the selection of the forward cipher function from the family of permutations.\n\n19. A parameter used in the block cipher algorithm that determines the forward cipher function.\n\n20. A value used to control cryptographic operations, such as decryption, encryption, signature generation, or signature verification. For the purposes of these guidelines, key requirements shall meet the minimum requirements stated in Table 2 of NIST SP 800-57 Part 1.\nSee also Asymmetric Keys, Symmetric Key.\n\n21. A parameter that determines the transformation using DEA and TDEA forward and inverse operations.\n\n22. A parameter used in conjunction with a cryptographic algorithm that determines its operation in such a way that an entity with knowledge of the key can reproduce the operation, while an entity without knowledge of the key cannot. Examples of the use of a key that are applicable to this Recommendation include: 1. The computation of a digital signature from data, and 2. The verification of a digital signature.\n\n23. See cryptographic key.\n\n24. A parameter used in conjunction with a cryptographic algorithm that determines its operation in such a way that an entity with knowledge of the correct key can reproduce or reverse the operation, while an entity without knowledge of the key cannot. Examples of cryptographic operations requiring the use of cryptographic keys include: 1. The transformation of plaintext data into ciphertext data, 2. The transformation of ciphertext data into plaintext data, 3. The computation of a digital signature from data, 4. The verification of a digital signature, 5. The computation of an authentication code from data, 6. The verification of an authentication code from data and a received authentication code, 7. The computation of a shared secret that is used to derive keying material. 8. The derivation of additional keying material from a keyderivation key (i.e., a pre-shared key).\n\n25. A parameter used in conjunction with a cryptographic algorithm that determines its operation in such a way that an entity with knowledge of the key can reproduce or reverse the operation while an entity without knowledge of the key cannot. Examples include 1. The transformation of plaintext data into ciphertext data, 2. The transformation of ciphertext data into plaintext data, 3. The computation of a digital signature from data, 4. The verification of a digital signature, 5. The computation of a message authentication code (MAC) from data, 6. The verification of a MAC received with data, 7. The computation of a shared secret that is used to derive keying material.\n\n26. A value used to control cryptographic operations, such as decryption, encryption, signature generation, or signature verification.\n\n27. A cryptographic key. In this document, keys generally refer to public key cryptography key pairs used for authentication of users and/or machines (using digital signatures). Examples include identity key and authorized keys. The SSH protocol also uses host keys that are used for authenticating SSH servers to SSH clients connecting them.\n\n28. See “Cryptographic Key”.\n\n29. A value used to control cryptographic operations, such as decryption, encryption, signature generation or signature verification. For the purposes of this document, key requirements shall meet the minimum requirements stated in Table 2 of NIST SP 800-57 Part 1.\nSee also Asymmetric keys, Symmetric key.",
  "synonyms": [
    "cryptographic key"
  ],
  "references": [
    "FIPS 201-3",
    "NIST SP 800-108r1 [August 2022 (Includes updates as of 02-02-2024)]",
    "NIST SP 800-56C Rev. 2",
    "FIPS 197 [NIST FIPS 197-upd1]",
    "NIST SP 800-175A",
    "FIPS 203",
    "FIPS 204",
    "FIPS 205",
    "NIST IR 8459; NIST SP 800-38A",
    "NIST SP 800-63-4",
    "CNSSI 4009-2015 from CNSSI 4005",
    "NIST SP 800-12 Rev. 1 from FIPS 186-4; FIPS 186-5",
    "NIST SP 800-102",
    "NIST SP 800-107 Rev. 1",
    "NIST SP 800-108 [Superseded]",
    "NIST SP 800-152",
    "NIST SP 800-20",
    "NIST SP 800-38B; NIST SP 800-38D",
    "NIST SP 800-38C",
    "NIST SP 800-63-3 [Superseded]",
    "NIST SP 800-67 Rev. 2; NIST SP 800-67 Rev. 1 [Superseded]",
    "NIST SP 800-89",
    "NIST SP 800-133 [Superseded]; NIST SP 800-133 Rev.1 [Superseded]; NIST SP 800-20; NIST SP 800-57 Part 1 Rev. 4 [Superseded]; NIST SP 800-67 Rev. 2; NIST SP 800-90A Rev. 1; NIST SP 800-175B Rev. 1; NIST SP 800-57 Part 1 Rev. 5; NIST SP 800-133 Rev. 2; NIST SP 800-57 Part 1 Rev. 3 [Superseded]; NIST SP 800-67 Rev. 1 [Superseded]",
    "NIST SP 800-133 Rev.1 [Superseded]",
    "NIST SP 800-175B Rev. 1",
    "NIST SP 1800-21B from NIST SP 800-63-3",
    "NISTIR 7966",
    "FIPS 201 [version unknown]",
    "NIST SP 800-63-2 [Superseded]",
    "NIST CSRC Glossary"
  ],
  "url": "https://mlchart.com/terminology/cybersecurity/key/"
}