Practical Internet of Things Security - Second Edition

Key generation

Key generation refers to how, when, and on which devices (including key management servers, HSMs, and so on) cryptographic keys are generated, and using which algorithms. Keys should be generated using a well-vetted RNG or DRBG seeded with sufficient min-entropy (discussed earlier). Key generation can be performed directly on the device or in a more centralized key management system (the latter requiring subsequent, secure distribution to the device).