Encryption The process of changing plaintext into ciphertext using a cryptographic algorithm and key. Hashing algorithm (or An algorithm that maps a bit string of arbitrary length to a fixed length bit hash algorithm, hash string. Approved hashing algorithms satisfy the following properties: function) 1. (One-way) It is computationally infeasible to find any input that maps to any pre-specified output, and 2. (Collision resistant) It is computationally infeasible to find any two distinct inputs that map to the same output. Integrity The property that sensitive data has not been modified or deleted in an unauthorized and undetected manner. Key derivation A function in the lifecycle of keying material; the process by which one or (derivation) more keys are derived from: 1) Either a shared secret from a key agreement computation or a cryptographic key, and 2) Other information. Key management The activities involving the handling of cryptographic keys and other related security parameters (e.g., IVs and passwords) during the entire life cycle of the keys, including their generation, storage, establishment, entry and output, and destruction. Key wrapping A method of encrypting and/or MACing/signing keys. (wrapping) Message A cryptographic checksum on data that uses a symmetric key to detect Authentication Code both accidental and intentional modifications of data. (MAC) PGP Key A RFC 4880-compliant container of cryptographic keys and associated metadata. Usually text-based (in PGP-parlance, ASCII-armored). Private key A cryptographic key used with a public key cryptographic algorithm that is uniquely associated with an entity and is not made public. The private key is associated with a public key. Depending on the algorithm, the private key MAY be used to: 1. Compute the corresponding public key, 2. Compute a digital signature that can be verified by the corresponding public key, 3. Decrypt data that was encrypted by the corresponding public key, or 4. Compute a piece of common shared data, together with other information. Profile A specification of objects, attributes, operations, message elements and authentication methods to be used in specific contexts of key management server and client interactions (see [KMIP-Prof]).
Encryption The process of changing plaintext into ciphertext using a cryptographic algorithm and key. Hashing algorithm (or hash algorithm, hash function) An algorithm that maps a bit string of arbitrary length to a fixed length bit string. Approved hashing algorithms satisfy the following properties: 1. (One-way) It is computationally infeasible to find any input that maps to any pre-specified output, and 2. (Collision resistant) It is computationally infeasible to find any two distinct inputs that map to the same output. Integrity The property that sensitive data has not been modified or deleted in an unauthorized and undetected manner. Key derivation (derivation) A function in the lifecycle of keying material; the process by which one or more keys are derived from: 1) Either a shared secret from a key agreement computation or a cryptographic key, and 2) Other information. Key management The activities involving the handling of cryptographic keys and other related security parameters (e.g., IVs and passwords) during the entire life cycle of the keys, including their generation, storage, establishment, entry and output, and destruction. Key wrapping (wrapping) A method of encrypting and/or MACing/signing keys. Message Authentication Code (MAC) A cryptographic checksum on data that uses a symmetric key to detect both accidental and intentional modifications of data. PGP Key A RFC 4880-compliant container of cryptographic keys and associated metadata. Usually text-based (in PGP-parlance, ASCII-armored). Private key A cryptographic key used with a public key cryptographic algorithm that is uniquely associated with an entity and is not made public. The private key is associated with a public key. Depending on the algorithm, the private key MAY be used to: 1. Compute the corresponding public key, 2. Compute a digital signature that can be verified by the corresponding public key, 3. Decrypt data that was encrypted by the corresponding public key, or 4. Compute a piece of common shared data, together with other information. Profile A specification of objects, attributes, operations, message elements and authentication methods to be used in specific contexts of key management server and client interactions (see [KMIP-Prof]).