Generating Secure Cryptographic Keys: A Critical Component of Cryptographic Key Management and the Protection of Sensitive Information

Published

December 19, 2012

Author(s)

Shirley M. Radack

Abstract

This bulletin summarizes the information presented in NIST Special Publication (SP) 800-133, Recommendation for Cryptographic Key Generation. The publication helps federal government organizations generate the cryptographic keys that are to be used with approved cryptographic algorithms to protect information and information systems. Topics discussed include general background information on the generation of cryptographic keys, how and where the keys are generated; and requirements for the generation of keys that provide the security strengths needed by organizations to protect their information. The bulletin summarizes these topics and includes references to additional sources of information on the management of cryptographic keys.

Citation

ITL Bulletin -

NIST Pub Series

ITL Bulletin

Pub Type

NIST Pubs

Download Paper

Local Download

Keywords

asymmetric keys, authentication, cryptographic keys, cryptographic modules, cyber security, decryption, encryption, information security, information systems, key generation, key management, public keys, private keys, random bit generation, security management, symmetric keys, security requirements, security risks

Citation

Radack, S. (2012), Generating Secure Cryptographic Keys: A Critical Component of Cryptographic Key Management and the Protection of Sensitive Information, ITL Bulletin, National Institute of Standards and Technology, Gaithersburg, MD, [online], https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=913043 (Accessed October 14, 2025)