3 min read
How to Simplify Compliance Audits for Key Management Systems
This article explains some of the cryptographic key management tasks involved in demonstrating and proving compliance to acceptable standards, and...
Key Management (6)
3 min read
Key Management Interoperability: Achievements and Challenges
The Key Management Interoperability Protocol standard intends to provide interoperability across various key management environments and hence to...
3 min read
Symmetric Key Creation & Keyshare Generators Explained
Martin Rupp (guest): 05. March 2021
In this article, we look at the process of a keyshare generator and key derivation as described by the ANSI X9.24-1-2017 standard. This process is...
5 min read
BYOK for Google Cloud: Financial Institution Benefits
This article discusses the concerns surrounding key management for cloud environments and how Cryptomathic addresses them by bringing banking-grade...
2 min read
BYOK: A Solution for EBA’s ICT and Security Risk Management Guidelines
The European Banking Authority's (EBA’s) new ICT and Security Risk Management Guidelines provide guidance for cybersecurity requirements for...
3 min read
Postbank Master Key Breach: Strong Key Management Importance
Martin Rupp (guest): 04. August 2020
In the last couple of months, facts regarding breaches that occurred during December 2018 at PostBank, the national postal bank operator of South...
3 min read
The Reasons Why a Banking KMS Must Support Atalla Key Blocks
Martin Rupp (guest): 30. June 2020
Invented by Mohamed Atalla, the Atalla key block is the root of all key blocks. All over the globe, hundreds of millions of financial transactions...
8 min read
How to Secure the Lifecycle of Cryptographic Keys
Chris Allen: 13. May 2020
This article discusses the main phases involved in the life-cycle of a cryptographic key, and how the operational lifetime of a key and its strength...
6 min read
Symmetric Cryptography & Key Management: Exhaustion & Rotation
With data protection standards, such as GDPR, and the sheer mass of data that companies collect and accumulate, the protection and control of...