Cryptographic Keys

Cryptographic keys are central to cryptographic operations. Many cryptographic schemes consist of pairs of operations, such as encryption and decryption, or signing and verification. A key is a piece of variable data that is fed as input into a cryptographic algorithm to perform one such operation. In a well-designed cryptographic scheme, the security of the scheme depends only on the security of the keys used.

Cryptographic keys can be classified based on their usage within a cryptographic scheme, as Symmetric Keys or Asymmetric Keys. A symmetric key is a single key that is used for both operations in a cryptographic scheme (for example, to both encrypt and to decrypt your data). Usually, the security of the scheme depends on ensuring that the key is only known to the authorized participants. Asymmetric keys, on the other hand, are used in cryptographic schemes where different keys are needed for each operation. Common examples of such schemes are those using public/private key pairs, where the security of the scheme depends on ensuring that the private key is only known to one party. For example, public/private key encryption systems use two keys, a public key that anyone can use to encrypt data and a private key that only the authorized recipient possesses and that can be used to decrypt the data.

Cryptographic keys can be further classified by the purpose for which they are used. These uses include digital signature generation, digital signature verification, message authentication, data encryption and decryption, key wrapping, and key transport. For a full list of key types as defined by the National Institute of Standards and Technology (NIST), see section 5 GENERAL KEY MANAGEMENT GUIDANCE of NIST Special Publication 800-57: Recommendation for Key Management – Part 1: General (Revision 5).