key encryption key (KEK)

A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z

Abbreviation(s) and Synonym(s):

Definition(s):

  A key that encrypts other key (typically traffic encryption keys (TEKs)) for transmission or storage.
Source(s):
CNSSI 4009-2015 CNSSI 4005

  A key derived from the authorization key that is used to encrypt traffic encryption keys (TEK) during the TEK exchange.
Source(s):
NIST SP 800-127 under Key encryption key (KEK) [Withdrawn]

  A cryptographic key that is used for the encryption or decryption of other keys.
Source(s):
NIST SP 800-57 Part 2 under Key encrypting key [Superseded]

Glossary Comments

Comments about specific definitions should be sent to the authors of the linked Source publication. For NIST publications, an email is usually found within the document.

Comments about the glossary's presentation and functionality should be sent to secglossary@nist.gov.

See NISTIR 7298 Rev. 3 for additional details.

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

key encryption key (KEK)

Glossary Comments