| Secure, non-operable system states are states in which the information system is not performing mission/business-related processing (e.g., the system is off-line for maintenance, troubleshooting, boot-up, shutdown). If an adversary is able to modify key material, then the adversary may be able to compromise sensitive DoD information. The adversary may also be able to bypass authentication controls on downloaded applications, websites, and network access points depending on the keys modified. This attack could enable the adversary to install unauthorized applications and stage subsequent attacks on other systems. Preventing modification of key material mitigates the risk of this attack.
Key material general refers to cryptographic keys and algorithms. There are operations were key material must be modified for proper operation of the cryptographic system. |
