+1 coinfor reading to the end
+1
Home / Glossary / KEK
Glossary · Security

KEK

Key Encryption Key

In plain language

A key whose only job is to lock other keys.

The metaphor

Like a safe where you keep the keys to your other safes.

Going deeper

How it works

  • Data is locked with one key and that key is locked with another.
  • It makes it easy to change the outer key without re-locking everything.
  • It is common in disk encryption and cloud key services.
  • If the outer key is lost, the inner keys cannot be unlocked.
In practice
  • A cloud service protects the keys for your data with a master key.
  • A laptop disk encryption stores its data key under a protected one.
  • A key manager rotates the outer key every year.

A question owners ask

Does this change how I back up keys?

It can. Recovery keys are the thing to store safely, for example with your IT provider or in a company password manager.

Related terms
AAAAuthentication, Authorization, and AccountingAccount takeoverACLAccess Control ListAdmin accountAESAdvanced Encryption StandardAES-256Advanced Encryption Standards 256-bitAISAutomated Indicator SharingAPTAdvanced Persistent Threat

Something here sounds like your problem?

Every WILDCARD card exists to solve one named problem. Find yours.

Pick your problem →