When moving up in levels, root entropy should be re-generated

anton commented

2025-01-04 14:35:18 +00:00

Owner

Because each level exposes cryptographic material to different threats, when moving up in security levels, it is recommended to re-generate keys as they may had been exposed under weaker controls provided by the previous security level. An example of this is if a system is implemented to support the Level 2 security model, the cryptographic material is not protected from side-channel attacks adequately which means a threat actor could exfiltrate the keys and wait for any duration of time before they decide to execute an attack.

This note should be added to the threat model / intro section for clarity.

Because each level exposes cryptographic material to different threats, when moving up in security levels, it is recommended to re-generate keys as they may had been exposed under weaker controls provided by the previous security level. An example of this is if a system is implemented to support the Level 2 security model, the cryptographic material is not protected from side-channel attacks adequately which means a threat actor could exfiltrate the keys and wait for any duration of time before they decide to execute an attack. This note should be added to the threat model / intro section for clarity.

anton added this to the Custody Framework project 2025-01-04 14:35:18 +00:00

anton added the

qvs

label 2025-01-04 14:36:41 +00:00

When moving up in levels, root entropy should be re-generated #36