The service may be configured to automatically generate new key material for a symmetric key at a user-defined interval, provided the key material was generated within the service, while retaining prior versions for decryption.
Automatic Symmetric Key Rotation
CCC.KeyMgmt.CP20
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.KeyMgmt.TH03 | Key Rotation is Disabled or Delayed Beyond Policy Limits | Modification of automatic or manual rotation settings can keep older key material active longer than intended, decreasing cryptographic resilience and extending exposure in the event of key compromise. |