What does cryptographic key lifecycle management include?

• A. Only generating keys.
• B. Storing keys in plaintext.
• C. Key generation, storage, rotation, revocation, and destruction.
• D. Sharing keys with all users.

Answer: (C)

Key lifecycle management covers every stage of handling cryptographic keys to keep them secure and usable. It includes generating keys, which creates the initial material; storing keys safely so they remain confidential and protected from unauthorized access; rotating keys on a schedule or when there’s a risk of compromise to limit exposure; revoking keys when they’re no longer trusted or when the related party should no longer have access; and destroying keys securely when they are no longer needed to prevent any recoverability.

This combination matters because just generating keys doesn’t protect them over time, and insecure storage or failing to rotate, revoke, or destroy keys can lead to leaks, unauthorized access, or continued misuse. Sharing keys with everyone undermines confidentiality and access control, defeating the whole purpose of controlled, party-specific cryptographic security.