Request for review: Offline Key Management Draft Report (Block 14)

Working Group(s) Cyber Security
1

@Tomofumi_Okubo @JBringer @Mitchell

Hello Cybersecurity WG Chairs and Experts,

Following our sessions at BGIN Block 14 in Tokyo, we have prepared the draft session report for: Offline Key Management.

Review Request: Please review the attached draft for technical accuracy and provide any feedback, corrections, or additions directly in this thread by March 27.

Security_Offline_Key_Management.docx (39.5 KB)

Thank you for your contributions to these governance standards.

Best regards,

Rola

2

Thanks @Rola .

Fixes:
-Engage with Begin’s partners → Engage with BGIN’s partners
-Not enough anonymized (“Chloe”?)

Additional info:

Among action items, for lifecycle framework:

  • importance to consider case where no HSM is possible, and how to deal with migration practices vs maintaining security of the keys, revocation challenges, governance provision for transfer of liability.
  • how to balance offline key management vs the regulatory requirement for x % of cold storage. For instance, is there a better way to secure assets than requiring 99% of cold storage?

Next step: start drafting a first document underlining the key aspects discussed during the session. And decide when / which remote calls to be scheduled to organized the drafting.