1. Saikat Saha- Oracle Corp. 20th February, 2014
Key Escrow - KMIP
Saikat Saha- Oracle Corp.
20th February, 2014

2. Agenda
Definition of Key Escrow
KMIP Implications & Next steps

3. Definitions
Escrow - a deed, a bond, money, or a piece of property held in trust by a third party to be turned over to the grantee only upon fulfillment of a condition (Merriam-Webster)
Key Escrow – An arrangement in which the keys needed to decrypt encrypted data are held in escrow so that, under certain circumstances, an authorized third party may gain access to those keys. (Wikipedia)
- Businesses
- Governments

4. Why Escrow? Legal Procedure - Primarily Surveillance (Covert ?)
Recovery of Encrypted Media/Communication
Note: Key Escrow is different from voluntary or involuntary key disclosure or key surrender

5. Implications
Sharing Cryptographic Keys with Authorized Third Parties (a.k.a Escrow Agent)
Access to keys can be provided by
Manual: Controlled process when needed
Automatic: Provide key access to Escrow agent and Backup of keys to the third party to prevent loss of keys

6. Next Step Question Addition to Use Case Document
Do we want to do something about Key Escrow?
Addition to Use Case Document
Authorization: Allow “Trusted Third Party” a.k.a “Escrow Agent” as another ‘legitimate’ owner of managed objects
Automatically backup keys to the authorized third party location
Does it suffice with minimal impact?