# CRY – Cryptography and Key Management

- Web page: https://c5.patrickscheid.de/en/cry/

- [CRY-01 Policy for the Use of Cryptographic Mechanisms](https://c5.patrickscheid.de/en/cry-01/index.html.md): 5 sub-criteria (2 basic, 3 additional), changed since C5:2020
- [CRY-02 Cryptographic Change Management](https://c5.patrickscheid.de/en/cry-02/index.html.md): 3 sub-criteria (3 basic), with customer criteria, new in C5:2026
- [CRY-03 Review of Cryptography Practices](https://c5.patrickscheid.de/en/cry-03/index.html.md): 2 sub-criteria (2 basic), new in C5:2026
- [CRY-04 Protection of Data for Transmission (Transport Protection)](https://c5.patrickscheid.de/en/cry-04/index.html.md): 3 sub-criteria (2 basic, 1 additional), with customer criteria, changed since C5:2020 (formerly CRY-02)
- [CRY-05 Encryption of Sensitive Data at Rest](https://c5.patrickscheid.de/en/cry-05/index.html.md): 6 sub-criteria (5 basic, 1 additional), with customer criteria, changed since C5:2020 (formerly CRY-03)
- [CRY-06 Secure Key Generation](https://c5.patrickscheid.de/en/cry-06/index.html.md): 1 sub-criterion, changed since C5:2020 (formerly CRY-04)
- [CRY-07 Rotation of Cryptographic Keys](https://c5.patrickscheid.de/en/cry-07/index.html.md): 1 sub-criterion, changed since C5:2020 (formerly CRY-04)
- [CRY-08 Public-Key Certificate Issuance](https://c5.patrickscheid.de/en/cry-08/index.html.md): 1 sub-criterion, with customer criteria, changed since C5:2020 (formerly CRY-04)
- [CRY-09 Secure Key Provisioning](https://c5.patrickscheid.de/en/cry-09/index.html.md): 2 sub-criteria (2 basic), changed since C5:2020 (formerly CRY-04)
- [CRY-10 Secure Storage of Keys](https://c5.patrickscheid.de/en/cry-10/index.html.md): 2 sub-criteria (1 basic, 1 additional), changed since C5:2020 (formerly CRY-04)
- [CRY-11 Cryptographic Key Archival](https://c5.patrickscheid.de/en/cry-11/index.html.md): 1 sub-criterion, new in C5:2026
- [CRY-12 Cryptographic Key Transition Management](https://c5.patrickscheid.de/en/cry-12/index.html.md): 1 sub-criterion, changed since C5:2020 (formerly CRY-04)
- [CRY-13 Handling of Compromised Keys](https://c5.patrickscheid.de/en/cry-13/index.html.md): 2 sub-criteria (2 basic), changed since C5:2020 (formerly CRY-04)
- [CRY-14 Secure Deactivation of Cryptographic Keys](https://c5.patrickscheid.de/en/cry-14/index.html.md): 1 sub-criterion, changed since C5:2020 (formerly CRY-04)
- [CRY-15 Requirements for Pre-Shared Keys](https://c5.patrickscheid.de/en/cry-15/index.html.md): 1 sub-criterion, changed since C5:2020 (formerly CRY-04)
- [CRY-16 Operational Continuity for Key Management](https://c5.patrickscheid.de/en/cry-16/index.html.md): 2 sub-criteria (2 basic), new in C5:2026
- [CRY-17 Cryptographic Key Lifecycle Management](https://c5.patrickscheid.de/en/cry-17/index.html.md): 2 sub-criteria (2 basic), changed since C5:2020 (formerly CRY-04)
- [CRY-18 Usage of External Key Management Systems](https://c5.patrickscheid.de/en/cry-18/index.html.md): 1 sub-criterion, with customer criteria, new in C5:2026
- [CRY-19 Secure Handling of Customer Managed Keys](https://c5.patrickscheid.de/en/cry-19/index.html.md): 1 sub-criterion, with customer criteria, new in C5:2026

---

Source: BSI C5:2026, machine-readable edition v1.0.1, © Federal Office for Information Security (BSI) 2026, reproduced unchanged under CC BY-ND 4.0 (https://creativecommons.org/licenses/by-nd/4.0/). Change notes: BSI C5:2026 Changelog, © BSI 2026, CC BY-ND 4.0. Unofficial presentation, not affiliated with BSI.