Encrypting Keys Securely

Encryption keys are sometimes encrypted themselves; doing that properly requires special care. Although it might look like an oversight at first, the broadly accepted formal security definitions for cryptosystems don't allow encryption of key-dependent messages. Furthermore, key-management systems frequently use key encryption or wrapping, which might create dependencies among keys that lead to problems with simple access-control checks. Security professionals should be aware of this risk and take appropriate measures. Novel cryptosystems offer protection for key-dependent messages and should be considered for practical use. Through enhanced access control in key-management systems, you can prevent security-interface attacks.

Public-Key Encryption for Secret Keys

Modern cryptography is concerned with giving precise mathematical models of the security guarantees that a cryptosystem gives. Any new cryptosystem must come with strong mathematical evidence or even complete proof for its security.