CRY
Cryptography and Key Management
- CRY-01Policy for the Use of Cryptographic Mechanisms
- CRY-02Cryptographic Change Management
- CRY-03Review of Cryptography Practices
- CRY-04Protection of Data for Transmission (Transport Protection)
- CRY-05Encryption of Sensitive Data at Rest
- CRY-06Secure Key Generation
- CRY-07Rotation of Cryptographic Keys
- CRY-08Public-Key Certificate Issuance
- CRY-09Secure Key Provisioning
- CRY-10Secure Storage of Keys
- CRY-11Cryptographic Key Archival
- CRY-12Cryptographic Key Transition Management
- CRY-13Handling of Compromised Keys
- CRY-14Secure Deactivation of Cryptographic Keys
- CRY-15Requirements for Pre-Shared Keys
- CRY-16Operational Continuity for Key Management
- CRY-17Cryptographic Key Lifecycle Management
- CRY-18Usage of External Key Management Systems
- CRY-19Secure Handling of Customer Managed Keys
BSI text from C5:2026 and its changelog: © Federal Office for Information Security 2026, reproduced unchanged under CC BY-ND 4.0. Unofficial site, not affiliated with BSI. Licence and sources