Keeping a copy of an encryption key with a trusted third party is known as password escrow. Doing a password escrow is one way to secure encryption keys.
EXPLANATION:
Password escrow or simply called escrow is when the trusted third party holds and keeps an item for individual or company until a certain period of time or specific condition arises. It is one way that is generally done by an institution to safeguard the encryption key. Actually, there are other ways to secure encryption keys. Here is the list:
- Secure encryption system physically. The systems and the machines which run and store the encryption programs have to be physically secured with locked doors and other appropriate treatment.
- Separate encryption keys with the data they decrypt. When the encryption keys and the data used to unlock are in the same machines, the encryption keys will be compromised when the machine is compromised.
-
Doing an audit trail. Audit trail avoids keys to be compromised and serving crucial data or information if there are data breaches.
-
Maintain a secure and updated backup. Keeping all of the encryption keys in one secure machine is very risky because when the machine fails, the encryption keys will be in damage.
-
Manage encryption key life-cycle. No matter how well the encryption keys being secured, if they are expired without a new key being saved, issued, secured, and backed up, the keys will be useless.
-
Create a key recovery procedure. Unintended data loss commonly happens. Accidental data will damage the encryption keys. Thus, making sure that there is a key recovery procedure will be very helpful to guarantee that the data will always be accessible no matter what happens.
- Change the keys periodically. Changing keys periodically will prevent unauthorized access to keys.
LEARN MORE:
If you’re interested in learning more about this topic, we recommend you to also take a look at the following questions:
1. Which of the following would typically be paid through an escrow account? brainly.com/question/2312030
KEYWORDS: password escrow, keeping a copy of an encryption key with trusted third party,
Subject: English
Class: 7-9
Sub-chapter: Password escrow
