sleutelduur

Sleutelduur, often translated as key duration or key life span, refers to the period during which a cryptographic key remains valid for encryption, decryption, signing, or authentication purposes. The concept is central to key lifecycle management in information security, ensuring that keys are rotated or revoked after a predetermined time to reduce the risk of compromise. In practical use, key duration is specified by an expiration date or a number of days from key generation, and it can be set by policy or administrative control.

The term originates in the field of cryptography, where keys must be protected against exposure through brute‑force attacks or side‑channel analysis. Short key durations limit the window of opportunity for attackers, but they also increase operational overhead. Long key durations reduce administrative burden but may create vulnerabilities if a key is exposed or if cryptographic algorithms become obsolete. Modern security frameworks such as ISO/IEC 27001, NIST SP 800‑57, and ISO/IEC 19790 address key duration as part of the key management lifecycle, recommending regular key rotation and automated expiration.

Key duration practices vary across systems. In symmetric key cryptography, keys are often rotated weekly or monthly, while asymmetric private keys may have durations of several years, depending on the algorithm’s strength. Password-based key derivations use key stretching to mitigate hardware advances that could reduce effective duration. In distributed systems, key usage logs often record timestamps to enable forensic analysis when a key’s validity period is exceeded.

In summary, sleutelduur serves as a balancing point between security, compliance, and operational efficiency. Effective key‑duration management involves setting appropriate lifespans, integrating automated revocation mechanisms, and maintaining clear policy documentation.