Skip to main content

CRYPTO LABSource All labs

Key Lifecycle

NIST SP 800-57 · Rotation · Compromise

Encrypt fictional records, copy an old key, rotate, and verify why captured ciphertext remains exposed.

WHY IT MATTERS

Rotating a key protects new records, but it cannot erase a stolen historical key or an attacker’s copy of old ciphertext. An authentic AES-GCM decrypt can still reveal data after a compromise.

Preparing the lab…

So whether you eat or drink or whatever you do, do it all for the glory of God. — 1 Corinthians 10:31