IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Communications Remarks
____________________________________________________________________ .........................................
- A suitable key should be selected. If possible, it should be generated
randomly. If a key can be chosen like a password, the relevant instructions
contained in S 2.11 Provisions governing the use of passwords must be
observed.
- The encrypted text and keys must not be stored together on a single data
medium. This can be implemented by writing the key down on a piece of
card and then storing it like a credit card in one's wallet. If the keys are
stored on floppy disks, these should be kept separate from the IT system.
Additional controls:
- Are users trained to use encryption products?
- Which encryption algorithms are used?
- Are the data and keys stored separately?
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000
Choose suitable key
Keep ciphertext and key
separate