Title: 2. Security. This section specifies the minimum security requirements that are to be satisfied by an entire key recovery system and security requirements for specific components of a key recovery system. A Key Recovery System will protect all sensitive
Author: Edward Roback
Company: MSFT

Working Group #2 - Security

2	Security requirements:  a Cryptographic Key Recovery System must conform to the following minimum security requirements.  Additional requirements may be imposed by the system policy. 

2.1	Confidentiality:  all cryptographic key recovery systems and components must prevent disclosure of keys and data to unauthorized parties. 

2.2	Integrity:  key recovery agents must, when required by system policy, protect the integrity of any keys or data held or produced.  Protection may be by physical means or by digital signature, message authentication codes, or other electronic means.  In particular, when required by system policy, it shall be possible for a key recovery agent to provide data that “proves” that keys and data have not been altered.  

2.3	Authentication:  a cryptographic key recovery system must, when required by system policy, provide means to determine the key recovery characteristics of other systems.  In particular, if a system policy allows communication only with key recovery enabled systems, the system shall ensure that all appropriate communication keys are properly escrowed by at least one of the communicating systems.

2.4	Access:  a cryptographic key recovery system must adhere to system policy for authorization of parties when providing access to keys or data.

2.5	Repudiation:  all keys and data provided by a key recovery agent must, when required by system policy, be accompanied by data sufficient to enable the recipient of the data to prove its origin to a third party.

2.6	Survival:  a key recovery agent must, to the extent required by system policy,  utilize means to protect against denial of service attacks, accidental or malicious attempts to disable operation, external interference or tampering of critical system functions, and physical.

2.7	Availability:  a key recovery agent must be able to supply data to authorized parties in a format and within a time limit set by system policy.

2.8	Auditing:  a key recovery agent must, when required by system policy, audit all security critical functions.