| Both sides previous revision Previous revision | |
| public:99_annexes:annex-b-terms-and-definitions:c:cryptographic_material [2026/09/12 17:42] – ↷ Page moved from private:99_annexes:annex-b-terms-and-definitions:c:cryptographic_material to public:99_annexes:annex-b-terms-and-definitions:c:cryptographic_material nick_dido | public:99_annexes:annex-b-terms-and-definitions:c:cryptographic_material [2026/09/12 17:43] (current) – ↷ Links adapted because of a move operation nick_dido |
|---|
| ====== Cryptographic Material ====== | ====== Cryptographic Material ====== |
| |
| [[private:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]] | [[public:99_annexes:annex-b-terms-and-definitions:start|Go up to Terms and Definitions]] |
| |
| ===== Discussion ===== | ===== Discussion ===== |
| Cryptographic Material includes symmetric keys, private keys, public keys, certificates, key-encryption keys, seeds, salts, initialisation vectors, nonces, shared secrets, and related cryptographic parameters. | Cryptographic Material includes symmetric keys, private keys, public keys, certificates, key-encryption keys, seeds, salts, initialisation vectors, nonces, shared secrets, and related cryptographic parameters. |
| |
| Not all Cryptographic Material requires [[private:99_annexes:annex-b-terms-and-definitions:c:confidentiality|Confidentiality]]. Public keys and certificates ordinarily require [[private:99_annexes:annex-b-terms-and-definitions:i:integrity|Integrity]] and authenticity without secrecy. Private keys and shared secrets require confidentiality in addition to integrity and authenticity. | Not all Cryptographic Material requires [[public:99_annexes:annex-b-terms-and-definitions:c:confidentiality|Confidentiality]]. Public keys and certificates ordinarily require [[public:99_annexes:annex-b-terms-and-definitions:i:integrity|Integrity]] and authenticity without secrecy. Private keys and shared secrets require confidentiality in addition to integrity and authenticity. |
| |
| The applicable protection depends upon the material’s purpose, classification, [[private:99_annexes:annex-b-terms-and-definitions:l:lifecycle|Lifecycle]] state, and exposure risk. | The applicable protection depends upon the material’s purpose, classification, [[public:99_annexes:annex-b-terms-and-definitions:l:lifecycle|Lifecycle]] state, and exposure risk. |
| |
| ===== Definition ===== | ===== Definition ===== |
| ===== Note ===== | ===== Note ===== |
| |
| Cryptographic Material remains distinct from a [[private:99_annexes:annex-b-terms-and-definitions:c:credential|Credential]]. Cryptographic Material supports cryptographic processing. A Credential represents an [[private:99_annexes:annex-b-terms-and-definitions:i:identity|Identity]] or authority claim used in [[private:99_annexes:annex-b-terms-and-definitions:a:authentication|Authentication]] or [[private:99_annexes:annex-b-terms-and-definitions:a:access_control|Access Control]]. A single artifact, such as a digital certificate, satisfies both definitions when an authentication process uses it to establish identity. | Cryptographic Material remains distinct from a [[public:99_annexes:annex-b-terms-and-definitions:c:credential|Credential]]. Cryptographic Material supports cryptographic processing. A Credential represents an [[public:99_annexes:annex-b-terms-and-definitions:i:identity|Identity]] or authority claim used in [[public:99_annexes:annex-b-terms-and-definitions:a:authentication|Authentication]] or [[public:99_annexes:annex-b-terms-and-definitions:a:access_control|Access Control]]. A single artifact, such as a digital certificate, satisfies both definitions when an authentication process uses it to establish identity. |
| |
| Cryptographic Material requires lifecycle controls addressing generation, acquisition, distribution, storage, access, use, rotation, revocation, expiration, archival, recovery, and destruction. | Cryptographic Material requires lifecycle controls addressing generation, acquisition, distribution, storage, access, use, rotation, revocation, expiration, archival, recovery, and destruction. |
| |
| Records concerning protected Cryptographic Material use protected references, identifiers, digests, or redacted representations to preserve [[private:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]] and [[private:99_annexes:annex-b-terms-and-definitions:t:traceability|Traceability]] without exposing the protected data. | Records concerning protected Cryptographic Material use protected references, identifiers, digests, or redacted representations to preserve [[public:99_annexes:annex-b-terms-and-definitions:e:evidence|Evidence]] and [[public:99_annexes:annex-b-terms-and-definitions:t:traceability|Traceability]] without exposing the protected data. |
| |
| ===== Example ===== | ===== Example ===== |
| |
| A private key and its associated public-key certificate used by a [[private:99_annexes:annex-b-terms-and-definitions:n:node|Node]] for mutual TLS constitute Cryptographic Material. The certificate also constitutes a Credential when the authentication process uses it to establish the Node’s identity. | A private key and its associated public-key certificate used by a [[public:99_annexes:annex-b-terms-and-definitions:n:node|Node]] for mutual TLS constitute Cryptographic Material. The certificate also constitutes a Credential when the authentication process uses it to establish the Node’s identity. |
| |
| ---- | ---- |