What is Key Management

Definition

Key management is the secure handling of the cryptographic keys used to encrypt and decrypt data throughout their lifecycle, covering generation, storage, distribution, rotation, and revocation, since the strength of encryption ultimately depends on protecting these keys.

« Back to Glossary Index

Secures the keys on which all encryption ultimately depends
Automates rotation so keys change regularly without manual error
Centralises control, audit, and revocation of cryptographic keys
Separates key custody from data, limiting the blast radius of a breach

Real World Example

A bank uses a managed key service to generate, rotate, and audit the keys protecting its databases, so encryption keys are never stored alongside the data and can be revoked instantly if a system is compromised.

FAQs

Why is key management critical to encryption?

Encryption is only as strong as the secrecy of its keys, so mishandled keys can undermine otherwise solid encryption.

What does the key lifecycle include?

Generation, secure storage, distribution, rotation, and eventual revocation or destruction of cryptographic keys.

What tools provide key management?

Dedicated key management services and hardware security modules, such as cloud KMS offerings, centralise and protect keys.