---

id: "SC-12(02)" title: "Symmetric Keys" family: "SC" family_name: "System and Communications Protection" sort_id: "sc-12.02" priority: "P1" implementation_level: "system" parent: "SC-12" enhancement: True

---

Statement

Produce, control, and distribute symmetric cryptographic keys using {{ insert: param, sc-12.02_odp }} key management technology and processes.

Guidance

SP 800-56A, SP 800-56B , and SP 800-56C provide guidance on cryptographic key establishment schemes and key derivation methods. SP 800-57-1, SP 800-57-2 , and SP 800-57-3 provide guidance on cryptographic key management.

Assessment Objective: symmetric cryptographic keys are produced using {{ insert: param, sc-12.02_odp }} key management technology and processes;

Assessment Objective: symmetric cryptographic keys are controlled using {{ insert: param, sc-12.02_odp }} key management technology and processes;

Assessment Objective: symmetric cryptographic keys are distributed using {{ insert: param, sc-12.02_odp }} key management technology and processes.

System and communications protection policy

procedures addressing cryptographic key establishment and management

system design documentation

system configuration settings and associated documentation

system audit records

list of FIPS-validated cryptographic products

list of NSA-approved cryptographic products

system security plan

other relevant documents or records

System/network administrators

organizational personnel with information security responsibilities

system developer

organizational personnel with responsibilities for cryptographic key establishment or management

Mechanisms supporting and/or implementing symmetric cryptographic key establishment and management