Saikat Saha- Oracle Corp. 20th February, 2014 Key Escrow - KMIP Saikat Saha- Oracle Corp. 20th February, 2014

Agenda Definition of Key Escrow KMIP Implications & Next steps

Definitions Escrow - a deed, a bond, money, or a piece of property held in trust by a third party to be turned over to the grantee only upon fulfillment of a condition (Merriam-Webster) Key Escrow – An arrangement in which the keys needed to decrypt encrypted data are held in escrow so that, under certain circumstances, an authorized third party may gain access to those keys. (Wikipedia) - Businesses - Governments

Why Escrow? Legal Procedure - Primarily Surveillance (Covert ?) Recovery of Encrypted Media/Communication Note: Key Escrow is different from voluntary or involuntary key disclosure or key surrender

Implications Sharing Cryptographic Keys with Authorized Third Parties (a.k.a Escrow Agent) Access to keys can be provided by Manual: Controlled process when needed Automatic: Provide key access to Escrow agent and Backup of keys to the third party to prevent loss of keys

Next Step Question Addition to Use Case Document Do we want to do something about Key Escrow? Addition to Use Case Document Authorization: Allow “Trusted Third Party” a.k.a “Escrow Agent” as another ‘legitimate’ owner of managed objects Automatically backup keys to the authorized third party location Does it suffice with minimal impact?