U.S. flag   An unofficial archive of your favorite United States government website
Dot gov

Official websites do not use .rip
We are an unofficial archive, replace .rip by .gov in the URL to access the official website. Access our document index here.

Https

We are building a provable archive!
A lock (Dot gov) or https:// don't prove our archive is authentic, only that you securely accessed it. Note that we are working to fix that :)

Computer Security Resource Center

Computer Security Resource Center

This is an archive
(replace .gov by .rip)
    Glossary
A  |  B  |  C  |  D  |  E  |  F  |  G  |  H  |  I  |  J  |  K  |  L  |  M  |  N  |  O  |  P  |  Q  |  R  |  S  |  T  |  U  |  V  |  W  |  X  |  Y  |  Z

Key-Encryption-Key (KEK)

Abbreviation(s) and Synonym(s):

KEK

Definition(s):

  A key that encrypts other key (typically Traffic Encryption Keys or TEKs) for transmission or storage.
Source(s):
CNSSI 4009-2015 from CNSSI 4005

  The key for the underlying block cipher of KW, KWP, or TKW. May be called a key-wrapping key in other documents.
Source(s):
NIST SP 800-38F under key-encryption key

  A cryptographic key that is used for the encryption or decryption of other keys to provide confidentiality protection for those keys. Also see Key-wrapping key.
Source(s):
NIST SP 800-57 Part 1 Rev. 5 under Key-encrypting key

  A cryptographic key that is used for the encryption or decryption of other keys.
Source(s):
NIST SP 800-57 Part 1 Rev. 3 [Superseded] under Key-encrypting key

  A cryptographic key that is used for the encryption or decryption of other keys to provide confidentiality protection. Also see Key-wrapping key.
Source(s):
NIST SP 800-57 Part 1 Rev. 4 [Superseded] under Key-encrypting key