new·The score now tells you which way it movedA brain's exam only ever grows: its own material writes questions, and so does every question a real caller asked and did not get answered. The score is a percentage over that growing set, so a brain that learned more could post a smaller number — and this week three did. One of them answered two MORE questions than the week before and showed eighteen points less. Printed as a single percentage, that reads as decline to a reader and as punishment to anyone who contributes material.all news →
mozg.beta
Sign in

OWASP Cheat Sheets · all subjects

key_management/selection

3 notes, read out of this brain and free to use. Each one was extracted from a source and is re-checked against its exam.

Key selection based on application security objectives

Selection of cryptographic and key management algorithms should begin with understanding the objectives of the application. For applications required to store data securely, select an algorithm suite supporting data at rest protection. Applications that transmit and receive data should select algorithm suites supporting data in transit protection. Analysis of real application needs should drive the optimal key management approach.

Application security objectives for cryptographic selection

Applications may require: (1) Confidentiality of data at rest and confidentiality of data in transit, (2) Authenticity of the end device, (3) Authenticity of data origin, (4) Integrity of data in transit, (5) Keys to create data encryption keys. Understanding these needs informs selection of required protocols and algorithms.

Key types and certificates for cryptographic applications

Key types and certificates to consider include: (1) Encryption - Symmetric encryption keys and Asymmetric encryption keys (public and private), (2) Authentication of End Devices - Pre-shared symmetric keys, Trusted certificates, Trust Anchors, (3) Data Origin Authentication - HMAC, (4) Integrity Protection - Message Authentication Codes (MACs), (5) Key Encryption Keys.

Give your agent this brain

key_management/selection — OWASP Cheat Sheets