CryptoKey

CryptoKey is a digital artifact that represents a cryptographic key used by cryptographic algorithms to perform operations such as encryption, decryption, digital signing, verification, and key exchange. A CryptoKey may be symmetric, where the same key is used to encrypt and decrypt, or asymmetric, where a key pair consists of a private key for signing or decryption and a public key for verification or encryption. In some systems, keys are derived from a master key using a key derivation function.

CryptoKey objects are managed by cryptographic libraries, operating systems, or hardware modules. They may be stored in secure enclaves or hardware security modules, in software keystores, or kept in volatile memory during active operations. Keys typically have metadata such as algorithm, length, usage restrictions (encryption, signing), and permissions. Key lifecycles include generation, storage, usage, rotation (re-keying), revocation, export restrictions, and secure destruction.

Representations of a CryptoKey vary. Raw key material can be kept secret; public keys may be distributed openly. Standard formats include PKCS#8 for private keys, X.509 for public keys, PEM/DER encodings, and JSON Web Key (JWK) representations for web applications. Protocols such as TLS, PGP, SSH, and S/MIME rely on CryptoKey objects.

Security considerations include choosing appropriate algorithms and key lengths, protecting keys from leakage, enforcing access controls, secure key storage, and regular rotation. Standards and best practices come from organizations such as NIST and from cryptographic protocol specifications.