Key management

Also written: key lifecycle

Handling keys safely across their whole life: generate them securely, store them apart from the data, distribute them safely, rotate them, escrow encryption keys only, and revoke and destroy them at the end.