The service can import key material generated outside the service, wrapped under a service-provided wrapping key, so that it can be used as a managed key.
Key Import
CCC.KeyMgmt.CP22
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.KeyMgmt.TH04 | Weak or Compromised Key Material is Imported | Insufficient validation during the key-import process may allow weak, back-doored, or otherwise compromised key material to be introduced, reducing the overall strength of subsequent cryptographic operations. |
| CCC.KeyMgmt.TH06 | Key Material is Generated or Stored Outside a Hardware Security Module | Keys may be created with a software protection level instead of being generated and held in a validated hardware security module. Key material then exists in a form that can be extracted or copied by a compromised host or privileged operator. Confidentiality of every item protected by the key is lost if the material is exfiltrated. |