Session Keys - Creation, Protection

Protection

There are a number of issues that pertain to scalability and cryptographic key integrity:

Automated Key Generation

Mechanisms used to automatically generate strong cryptographic keys can be used to deploy keys as part of key lifecycle management. Effective automated key generation systems are designed for user transparency, as well as complete cryptographic key policy enforcement.

Truly Random

For a key to be truly effective, it must have an appropriately high work factor. That is, the amount of time and effort by an attacker needed to break the key must be sufficiently significant so that it at least delays its discovery for as long as the information being protected needs to be kept confidential. One factor that may contribute to strong keys that have a high work factor is the level of randomness of the bits that make up the key.

Random

Asymmetric Key Length

Cryptographic keys are essentially strings of

The effectiveness of asymmetric bits. The numbers used in making up the key cryptography systems depends on the need to be unpredictable so that an attacker hard-to-solve nature of certain math cannot easily guess the key and then expose problems such as the factoring and discrete the protected information. Therefore, the log problems. These problems are time randomness of the numbers that comprise consuming to solve but usually faster than a key plays an important role in the lifecycle trying all possible keys by brute force. Given of a cryptographic key. In the context of this fact, asymmetric algorithm keys must cryptography, randomness is the required be longer for equivalent resistance to quality of lacking predictability. Computer attack than symmetric algorithm keys. As circuits and software libraries can be used examples, RSA Security claims that 1024bit RSA keys are equivalent in strength to to perform the actual generation of random 80-bit symmetric keys, 2048-bit RSA keys key values. Computers and software libraries are well known as weak sources to 112-bit symmetric keys, and 3072-bit RSA of randomness and, therefore, special keys to 128-bit symmetric keys. RSA also well-designed hardware and software suggests that 2048-bit keys probably will called random number generators are be sufficient until the year 2030. An RSA key length of 3072 bits should be used if needed for cryptography applications to ensure secure key creation.

security is required beyond 2030.