GRCLibrary.ai

Register

Approved Key-Agreement Protocols Register

This register lists the protocols that may be approved protocols, within which the ephemeral key-agreement key exemptions in the Cryptographic Key Operations Procedure and the Cryptographic Key Lifecycle Management Framework apply. A protocol is an approved protocol only when it is listed here and the adopting organization's Security Architecture has recorded the date and reference of its approval in the protocol's row; until then the exemptions do not apply to it. For each protocol, the register also records the one-time CISO approval that the procedure, section 4.3, requires before the protocol is used for ephemeral key-agreement keys on a high-sensitivity system. The register records these approvals; it does not restate the rules for ephemeral key-agreement keys, which the procedure holds.

Type
Register
Version
0.0.1
Date
2026-10-15
Owner
Chief Information Security Officer
Approving authority
Chief Information Security Officer
Classification
Public
Confidentiality
Public
Category
Information Security
Review frequency
Annual and upon approval, withdrawal, or material change of a listed protocol
Licence
CC BY-SA 4.0

Read the full text on GitHub (opens in a new tab)

Outline

  • Purpose
  • Scope
  • Register fields
  • Listed protocols
  • Governance and maintenance
  • Limitations

Related documents