Cryptography, translated into business language.

AES

Advanced Encryption Standard

A widely used symmetric encryption standard that protects data using the same secret key for encryption and decryption.

RSA

Rivest–Shamir–Adleman

A public-key algorithm commonly used for encryption and digital signatures; many organizations are evaluating its long-term use as part of post-quantum planning.

ECC

Elliptic Curve Cryptography

A public-key approach that provides strong security with comparatively small keys, often used in certificates, mobile systems, and secure protocols.

PKI

Public Key Infrastructure

The people, policies, systems, and processes used to issue, manage, validate, and revoke digital certificates.

HSM

Hardware Security Module

A specialized device that generates, protects, and uses cryptographic keys within a controlled, tamper-resistant boundary.

KMS

Key Management System

A service or platform for creating, storing, rotating, controlling, and auditing the use of cryptographic keys.

KEK

Key Encryption Key

A key used to encrypt or wrap other keys, reducing how often sensitive key material must be handled directly.

LMK

Local Master Key

A high-level key used inside certain cryptographic systems to protect other keys stored or processed by that system.

BYOK

Bring Your Own Key

A model in which an organization supplies key material for use with a cloud or service provider’s encryption controls.

HYOK

Hold Your Own Key

A model designed to keep key control outside a provider’s environment, giving the organization a stronger separation of custody.

Crypto-Agility

The ability to identify and change cryptographic algorithms, keys, certificates, libraries, or providers without uncontrolled disruption.

PQC

Post-Quantum Cryptography

Cryptographic algorithms designed to resist attacks from both conventional and sufficiently capable quantum computers.

ML-KEM

Module-Lattice-Based Key-Encapsulation Mechanism

A standardized post-quantum mechanism used to establish shared secret keys over an untrusted network.

Digital Certificates

Electronic credentials that bind an identity to a public key and help systems establish authenticated, encrypted connections.

Certificate Authority

A trusted entity that issues and signs digital certificates under defined validation and governance policies.

Key Rotation

The controlled replacement of a cryptographic key to limit exposure and satisfy security or compliance requirements.

Key Lifecycle

The full sequence of key generation, distribution, storage, use, rotation, archival, revocation, and destruction.

Tokenization

The replacement of sensitive data with a non-sensitive surrogate token while the original value is protected in a controlled vault or equivalent service. Unlike encryption, a token typically has no direct mathematical relationship to the source data.

Common Criteria

An international framework for evaluating and certifying the security properties of technology products against defined requirements.

PCI-DSS

Payment Card Industry Data Security Standard

A security standard for organizations that store, process, or transmit payment card data, including requirements affecting encryption and key management.