Yet another security issue: key management

Posted by wendyg in People and IT, people and passwords, security services at September 24th, 2007

What with one thing and another, I forgot about this piece until just now, when I went to update the Web page for that column series (www.pelicancrossing.net/hpkcols.htm - it’s the interviews column I do for the Inquirer). In it, Nicko van Someren, founder and CTO of nCipher, talks about the problem of key management: as crypto systems proliferate, dealing with keys is becoming a major issue.Natiurally, nCipher has a solution it would be happy to sell people, but that’s not the point: the point is more that every new security system we adopt comes with a complex management cost. This is true at all levels, from the major corporation that has a server tied up for a day just changing keys at all its sites throughout the world to the individual at home who locked down their Airport so tightly they now can’t remember how to open a connection for a guest who wants to use the Internet. These costs are part of why humans, who prefer easy lives, bypass security or turn it off rather than be hassled…

wg

One Response to “Yet another security issue: key management”

  1. Dave Walker Says:

    It’s generally-accepted wisdom that, if the deployment of a crypto system fails, 90% of the time the issues which cause the failure are down to key management. Here at Sun, we’ve just incorporated a key management framework into the current (08/07) release of Solaris 10; as I know Nicko from way back and know that he talks a lot of good sense, I’d be interested to know what he makes of it.

Leave a Reply

Contributors to the Blindside wiki and blog should note their input forms part of a collaborative resource that is Creative Commons (by-sa 2.5) licensed. We hope these resources will be reused and remixed in the public interest. You do not need to seek permission before you re-use our works, although we do require that users attribute Blindside as their source, and license the resulting work under the same terms.