KEK
Key Encryption Key
A key used to encrypt other keys, central to key management.
A KEK encrypts other cryptographic keys rather than encrypting user data directly, a practice known as key wrapping. This layered approach lets a single, well protected key safeguard many data encryption keys, simplifying rotation because only the wrapped keys change rather than re encrypting all data. KEKs are often stored in hardware security modules for stronger protection. The distinction from a data encryption key is a recurring exam point in key management hierarchy questions.
Looking KEK up is step one. Getting tested on it is step two.
A free account opens all 4 Domain 1 objectives, 271 exam-style questions with a lesson and a lab on each, a placement check that skips what you already know, and a dated plan. No card.
Not affiliated with or endorsed by CompTIA.