ComplianceNIST 800-53 enhancement
NIST-IA-13(1) Protection of Cryptographic Keys
- Framework
- NIST SP 800-53 rev5 (5.2.0)
- Family
- IA Identification and Authentication
- Control
- IA-13(1)
Control statement
Cryptographic keys that protect access tokens are generated, managed, and protected from disclosure and misuse.
Discussion
Identity assertions and access tokens are typically digitally signed. The private keys used to sign these assertions and tokens are protected commensurate with the impact of the system and information resources that can be accessed.
Related
Enhancement of · Compliance (1)
- NIST-IA-13 Identity Providers and Authorization Servers NIST 800-53 control
Related control · Compliance (2)
- NIST-SC-12 Cryptographic Key Establishment and Management NIST 800-53 control
- NIST-SC-13 Cryptographic Protection NIST 800-53 control