Security Without Obscurity: A Guide to PKI Operations

Public Key Infrastructure (PKI) is an operational ecosystem that requires key management, cryptography, IT, information security, policy, practices, legal matters, and business rules to function together coherently, efficiently, effectively, and successfully. It can be the technical foundation for crypto-agility and post-quantum cryptography (PQC) transitions.

Format: Paperback / softback
Length: 298 pages
Publication date: 26 February 2024
Publisher: Taylor & Francis Ltd

Public Key Infrastructure (PKI) is a complex operational ecosystem that encompasses a wide range of disciplines, including key management, cryptography, information technology (IT), information security (cybersecurity), policy and practices, legal matters (law, regulatory, contractual, privacy), and business rules (processes and procedures). To operate effectively, a PKI requires seamless coordination and collaboration among these diverse areas. A well-managed PKI necessitates the establishment of clear roles and responsibilities, the division of labor, comprehensive documentation, and effective communication channels.

It goes beyond the mere issuance of certificates and serves as the technical foundation for achieving cryptographic agility, which is the ability to manage cryptographic transitions seamlessly. As the second quantum revolution unfolds, with the advent of quantum computers, the transition to post-quantum cryptography (PQC) will become an integral part of PKI operations.

In this context, it is crucial to have a robust PKI infrastructure in place to ensure the security and resilience of digital systems and transactions. This includes the use of strong cryptographic algorithms, the implementation of robust key management systems, and the adoption of best practices for information security. By investing in PKI, organizations can protect their sensitive data, secure their communication channels, and maintain the trust of their stakeholders.

In conclusion, Public Key Infrastructure (PKI) is a critical component of modern information security. It requires a holistic approach that involves multiple disciplines working together seamlessly. By implementing a well-managed PKI, organizations can enhance their security posture, mitigate risks, and ensure the confidentiality, integrity, and availability of their data. As the world continues to evolve with the advancements in technology, PKI will remain an essential tool for protecting against emerging threats and ensuring the continued success of digital operations.

Weight: 586g
Dimension: 178 x 253 x 23 (mm)
ISBN-13: 9781032545257
Edition number: 2 ed