This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "Key Management Cheat Sheet"

From OWASP
Jump to: navigation, search
Line 66: Line 66:
 
= Authors and Primary Editors =
 
= Authors and Primary Editors =
  
Brian Russell - russellbri[at]leidos.com
+
Brian Russell - russellbri[at]leidos.com<br/>
 +
 
 
Drew Van Duren - drew.f.van.duren[at]leidos.com
 
Drew Van Duren - drew.f.van.duren[at]leidos.com
  

Revision as of 00:04, 4 February 2014

DRAFT CHEAT SHEET - WORK IN PROGRESS

Introduction

Key Management General Guidelines and Considerations

Algorithm Selection

Key Strength

Selecting

Enforcing

Maintaining

Memory Management Considerations

Perfect Forward Secrecy

Proxy Handling

Key Management Lifecycle Best Practices

Generation

Distribution

EndPoint Authentication

Algorithms and Protools

Integrity and Confidentiality

Storage

Software-based Storage

Hardware Storage

Escrow and Backup

Key Escrow

Key Backup

Tracking and Audit

Key Compromise and Recovery

Trust Stores

Population

Secure Update

Cryptographic Module Topics

Standards

Cryptographic Key Management Libraries

This article is focused on providing application security testing professionals with a guide to assist in managing cryptographic keys.

Authors and Primary Editors

Brian Russell - russellbri[at]leidos.com

Drew Van Duren - drew.f.van.duren[at]leidos.com

Other Cheatsheets

OWASP Cheat Sheets Project Homepage


This project is part of the OWASP Builders community.
Feel free to browse other projects within the Defenders, Builders, and Breakers communities.