What is a Data Encryption Key (DEK)?

What does DEK stand for?

A Records Encryption Key (DEK) is a kind of key designed to encrypt and decrypt statistics at least once or in all likelihood a couple of times. DEKs are created by an Encryption Engine. Data is encrypted and decrypted with the assist of the same DEK; consequently, a DEK must be stored for at the least a unique length for decrypting the generated Cipher textual content.

What Does Data Encryption Key Mean?

The term for storing statistics previous to its retrieval can also vary extensively, and some statistics can be saved for decades or even many years prior to getting Access to it. In order to Make certain that the data continues to be available, DEKs might also should be retained for terribly long intervals. A key-control Device gives existencE-Cycle supervision for every DEK generated by using an encryption engine. Key-management structures are usually offered by way of 0.33-party vendors.

Regardless of the life-cycle length, there are 4 Ranges in a DEK lifestyles cycle:

1. The secret is created using the crypto Module of the encryption engine.
2. The secret is then furnished to a key vault and to various different encryption engines.
3. This secret is utilized for encrypting and decrypting records.
4. The key's then suspended, terminated or destroyed.

A DEK may be custom designed to expire at some stage in a selected time body with the intention to save you facts from being compromised. Under such Instances, it ought to be used all over again for decrypting the facts after which the ensuing clear text is encrypted with the help of a brand new key (re-keyed).