CryptoCurrency Security Standard (CCSS) Aspect 1.03
1.03.1 Encryption of Operational Key Material
Aspect Control Overview: This aspect control addresses the protection of operational key material when not in use. The application of strong encryption protections is required to provide key material security.
1.03.2 Key Material Backup(s)
Aspect Control Overview: This aspect control addresses the risk of key material loss. At Level 1, a backup of operational key material must exist. At Level 2, backups must exist for all key material used in the wallet and can take any form, including paper, digital, or metal. Backups reduce the risk of losing access to assets if key material becomes unavailable.
1.03.3 Environmental Protection for Key Material Backup(s)
Aspect Control Overview: This control focuses on physical environmental risks associated with key material backup(s). Backup(s) must be protected from environmental risks, such as fire, water damage, electrical surges, or other localized physical threats.
Protective measures reduce the risk of key material loss. Different threat types require protective measures that are appropriate to the specific risk they present. Common protective measures include the following:
- Water-tight bag for flood protection
- Safe/Firebox for fire protection
- Surge protected drives for electrical protection
For enhanced protection at level 2, backups must be stored in geographically separate locations from the operational key material. Geographic separation mitigates risks where single-location failure, including floods, fires, or regional disruptions, could otherwise result in total key loss.
Threat modeling and risk assessment are useful in determining risk-based needs for geographic separation.
1.03.4 Key Material Backup(s) Have Access Control
Aspect Control Overview: Backup(s) must be stored under access controls that prevent unauthorized parties from obtaining or using the key material. This increases the confidentiality and security of key material. Acceptable controls will include locked facilities, safes, safe deposit boxes, or equivalent mechanisms where only authorized operators have access credentials.
1.03.5 Tamper-evident Key Material Backup(s)
Aspect Control Overview: At level 2, backup(s) must implement tamper-evident protections, specifically ones that allow operators to verify whether the backup has been accessed. Examples include handwritten signatures over seals, serialized tamper-evident storage bags, and sealed envelopes with signatures across the seal, provided the mechanism reveals evidence of tampering.
1.03.6 Key Material Backup(s) Encryption
Aspect Control Overview: This aspect control has a single requirement, which applies at Level 3: backups must be stored using encryption that is equal to or stronger than the encryption used for operational key material.
Click to learn more about the CCSS.
This article was written by Shreya Patel.