登录查看更多内容

How can you ensure your encryption keys are secure in the cloud and on mobile devices?

由人工智能和领英社区提供技术支持

Encryption is a vital technique for protecting your data from unauthorized access, especially when you store it in the cloud or use mobile devices. However, encryption is only as strong as the keys that you use to encrypt and decrypt your data. If your keys are compromised, stolen, or lost, your data can be exposed or inaccessible. Therefore, you need to ensure your encryption keys are secure in the cloud and on mobile devices. Here are some tips to help you do that.

此文章中的业界达人

由社区从 9 条内容中精选。了解更多

1 Choose strong keys

The first step to secure your encryption keys is to choose strong keys that are hard to guess or crack. A strong key should be long, random, and unique. Avoid using weak keys that are based on common words, phrases, or patterns. You can use tools like password generators or key management services to create and store strong keys. You should also use different keys for different purposes and change them regularly.

添加您的观点

Avishai Ziv

Decentralized proactive retiree ?●? Cybersecurity contrarian ?●? Bamboo enthusiast ?●? Seeker of great truth ?? (prev.: product & biz prodigy on Decentralized Identity, Encryption, PET, Zero-Trust & Blockchain Security)
举报内容
1. Use only compliant KMS (key management system) or HSM (hardware security module) to generate keys. 2. Store all private keys is HSM. One cannot overstate the importance of using HSM, to prevent leakage of key material and related breaches.

已翻译

赞
Abrar Khan

?? Cyber Essentials Plus Assessor | IASME Cyber Baseline Assessor
举报内容
The longer the key, the stronger it is. You can use password managers like Dashlane to secure your keys. Make sure the keys are random and also change them frequently. the same applies to your master password :p

已翻译

赞

2 Use secure algorithms

The second step to secure your encryption keys is to use secure algorithms that are widely accepted and tested. A secure algorithm should be able to resist known attacks and provide a high level of confidentiality, integrity, and authenticity. Avoid using outdated or proprietary algorithms that may have flaws or vulnerabilities. You should also use the appropriate algorithm for your data type and security needs. For example, you can use symmetric algorithms for data encryption and asymmetric algorithms for key exchange.

添加您的观点

Avishai Ziv

Decentralized proactive retiree ?●? Cybersecurity contrarian ?●? Bamboo enthusiast ?●? Seeker of great truth ?? (prev.: product & biz prodigy on Decentralized Identity, Encryption, PET, Zero-Trust & Blockchain Security)
举报内容
Start using quantum-resistant encryption algorithms, and implement only KMS and HSM that support post-quantum cryptography (PQC).

已翻译

赞

3 Encrypt your keys

The third step to secure your encryption keys is to encrypt your keys before storing them in the cloud or on mobile devices. Encrypting your keys adds an extra layer of protection and prevents anyone from accessing them without the correct passphrase or credential. You can use a different key to encrypt your keys or use a key wrapping technique that combines encryption and authentication. You should also store your keys in a secure location, such as a trusted cloud service provider or a hardware security module.

添加您的观点

Avishai Ziv

Decentralized proactive retiree ?●? Cybersecurity contrarian ?●? Bamboo enthusiast ?●? Seeker of great truth ?? (prev.: product & biz prodigy on Decentralized Identity, Encryption, PET, Zero-Trust & Blockchain Security)
举报内容
Ensure the KEK (key encryption key) uses additional and different encryption techniques, such as multi-party computation (MPC).

已翻译

赞

4 Manage your keys

The fourth step to secure your encryption keys is to manage your keys effectively. Managing your keys involves creating, distributing, rotating, revoking, and destroying your keys according to your security policies and best practices. You should also monitor and audit your key usage and access to detect and prevent any unauthorized or suspicious activities. You can use tools like key management systems or cloud key management services to automate and simplify your key management tasks.

添加您的观点

Avishai Ziv

Decentralized proactive retiree ?●? Cybersecurity contrarian ?●? Bamboo enthusiast ?●? Seeker of great truth ?? (prev.: product & biz prodigy on Decentralized Identity, Encryption, PET, Zero-Trust & Blockchain Security)
举报内容
Make sure all keys have a short lifetime, and enforce key rotation. Keys with long, or even unlimited life, are a major loophole.

已翻译

赞
Zinet Kemal, M.S.c

Cloud Security Engineer | AWS Community Builder | Award winning Author | TEDx speaker | Adjunct Instructor | Mentor | AWS Security Speciality | CISA | CCSK | GIAC Cloud Security | Terraform
举报内容
When we talk about management of keys rotation comes top of mind. Key rotation is an important aspect of security, and it falls under the customer's control in the shared responsibility model. AWS KMS provides tools and features that empower customers to automate the rotation of keys, reducing the risk associated with long-term key usage.

已翻译

赞

5 Backup your keys

The fifth step to secure your encryption keys is to backup your keys regularly. Backing up your keys ensures that you can recover your data in case of a disaster, such as a system failure, a ransomware attack, or a lost device. You should backup your keys to a separate and secure location, such as an offline storage device or a different cloud service provider. You should also test your backup keys periodically to verify that they work and are up to date.

添加您的观点

Ilkin Javadov

Senior Penetration Tester & Real Ethical Hacker | PCIP
举报内容
Document Your Backup Procedures: Comprehensive documentation of your backup procedures ensures consistency and facilitates recovery efforts in case of data loss. Clearly outline the backup frequency, storage locations, encryption methods, and testing procedures. Educate Key Personnel: Train your IT team and individuals responsible for managing encryption keys on proper backup procedures, security protocols, and disaster recovery plans.

已翻译

赞

6 Educate your users

The sixth step to secure your encryption keys is to educate your users about the importance and the best practices of encryption and key security. Your users are the ones who handle and access your data and keys, so they need to be aware of the risks and the responsibilities involved. You should train your users on how to create, store, use, and protect their keys, as well as how to report and respond to any incidents or issues. You should also enforce your security policies and guidelines through technical and administrative controls.

添加您的观点

Ilkin Javadov

Senior Penetration Tester & Real Ethical Hacker | PCIP
举报内容
Open Communication and Feedback: Encourage open communication and feedback from users regarding encryption and key security. Create a culture where users feel comfortable raising concerns, reporting incidents, and suggesting improvements to security practices. Continuous Learning and Adaptation: Regularly review and update user education materials and training programs to reflect evolving threats, technological advancements, and changes in security requirements. Foster a culture of continuous learning and adaptation to ensure users remain informed and equipped to handle new security challenges.

已翻译

赞

7 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

Ofir Azoulay-Rozanes
举报内容
Run your workloads in a Trusted Execution Environment (TEE, Confidential Computing), as it is the only way to protect the keys even when being used, as well as when needing to access the first secret.

已翻译

赞

Cybersecurity

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

How can you ensure your encryption keys are secure in the cloud and on mobile devices?

1

2

3

4

5

6

7

1 Choose strong keys

2 Use secure algorithms

3 Encrypt your keys

4 Manage your keys

5 Backup your keys

6 Educate your users

7 Here’s what else to consider

Cybersecurity

给文章评分

感谢您的反馈

更多Cybersecurity相关文章

更多相关阅读内容

How can you ensure your encryption keys are secure in the cloud and on mobile devices?

1

2

3

4

5

6

7

1 Choose strong keys

2 Use secure algorithms

3 Encrypt your keys

4 Manage your keys

5 Backup your keys

6 Educate your users

7 Here’s what else to consider

Cybersecurity

给文章评分

感谢您的反馈

查看其他技能