Control Strategy SharedKeyManagement

URI: CSG-SharedKeyManagement

Description: Processes Client and Service have secure access to a shared key used to encrypt and decrypt data Data for transfer via file or network.

(empty)

DF.A.CSDF-VdDA2.6

Inconsistent encryption of Data flowing from Service to Client: processes Client and Service exchange data Data in encrypted form but uses a key to encrypt or decrypt between transfer and processing, so they need a secure way to also share the cryptographic key used.

P.A.PcPuDS-V.6

Process Client cannot access input Data from Service due to inconsistent encryption: processes Client and Service both access a copy of Data stored in encrypted form, so they need a secure way to also share the cryptographic keys used.

P.T.PcPr-uDS-V.6

Process Client cannot access updates of Data from Service due to inconsistent encryption: processes Client and Service both access a copy of Data stored in encrypted form, so they need a secure way to also share the cryptographic keys used.

(empty)

KeyManagement at Role_Client

KeyManagement at Role_Service

Control Strategy SharedKeyManagement

Mitigated Threats (0)

Blocked Threats (3)

DF.A.CSDF-VdDA2.6

P.A.PcPuDS-V.6

P.T.PcPr-uDS-V.6

Triggers Threats (0)

Control Sets (2)