Glossary · MWE Terms · C
L1 — paginated flat list. Pick a POS, pick a letter.
TermTypeDefinitionClassificationsUpdated
Cryptographic Algorithm or HashnounMWEAn algorithm that employs the science of cryptography, including encryption algorithms, cryptographic hash algorithms, digital signature algorithms, and key agreement algorithms.verified
Cryptographic Ancillary EquipmentnounMWEEquipment designed specifically to facilitate efficient or reliable operation of cryptographic equipment, without performing cryptographic functions itself.verified
Cryptographic BindingnounMWEAssociating two or more related elements of information using cryptographic techniques.verified
Cryptographic BoundarynounMWEAn explicitly defined continuous perimeter that establishes the physical bounds of a cryptographic module and contains all the hardware, software, and/or firmware components of a cryptographic module.verified
Cryptographic ComponentnounMWEHardware or firmware embodiment of the cryptographic logic. A cryptographic component may be a modular assembly, a printed wiring assembly, a microcircuit, or a combination of these items.verified
Cryptographic Hash FunctionnounMWEA function that maps a bit string of arbitrary length to a fixed length bit string. Approved hash functions satisfy the following properties: 1) (One-way) It is computationally infeasible to find any input which maps to any pre-specified output, and 2) (Collision resistant) It is computationally infeasible to find any two distinct inputs that map to the same output.verified
Cryptographic Ignition KeynounMWEDevice or electronic key used to unlock the secure mode of crypto-equipment.verified
Cryptographic InitializationnounMWEFunction used to set the state of a cryptographic logic prior to key generation, encryption, or other operating mode.verified
Cryptographic KeynounMWEA parameter used in conjunction with a cryptographic algorithm that determines - the transformation of plaintext data into ciphertext data, - the transformation of ciphertext data into plaintext data, - a digital signature computed from data, - the verification of a digital signature computed from data, - an authentication code computed from data, or - an exchange agreement of a shared secret.verified
cryptographic key management activitynounMWEThis is a compositional phrase, not a standalone term of art. NIST's authoritative glossary defines *key management* itself as "the activities involving the handling of cryptographic keys and other related security parameters during the entire life cycle of the keys, including their generation, storage, establishment, entry and output, and destruction." "Cryptographic key management activity" simply names one instance or category of those activities—it is a noun-phrase built from the established terms "cryptographic key" and "key management," and carries no additional specialized meaning beyond what those component terms already convey. The broader field uses "key management" to cover the full lifecycle of keys in a cryptosystem, encompassing generation, exchange, storage, use, destruction, replacement, protocol design, key servers, and user procedures.verified
cryptographic key management informationnounMWEThis phrase is compositional rather than a term of art. It is a descriptive noun phrase combining "cryptographic key management" (the discipline governing the lifecycle of cryptographic keys) with "information" (the data involved in or produced by that discipline). NIST SP 800-57 Part 1 frames this domain as covering cryptographic keying material together with "other cryptographic information" requiring protection, and the functions and issues involved in managing it — but the combined phrase "cryptographic key management information" is not defined as a standalone entry. NIST's CSRC describes the scope of its Cryptographic Key Management Systems publications as addressing "the policies, procedures, components and devices that are used to protect, manage and establish keys and associated information (metadata)" — using "associated information" or "metadata" rather than coining the longer phrase as a term. No authoritative source (NIST, ISO, AICPA, CIS, or a regulator) treats it as a defined vocabulary item with a fixed, bounded meaning.verified
Cryptographic LogicnounMWEThe embodiment of one (or more) cryptographic algorithm(s) along with alarms, checks, and other processes essential to effective and secure performance of the cryptographic process(es).verified
Cryptographic ModulenounMWEThe set of hardware, software, firmware, or some combination thereof that implements cryptographic logic or processes, including cryptographic algorithms, and is contained within the cryptographic boundary of the module.verified
Cryptographic Module Security PolicynounMWEA precise specification of the security rules under which a cryptographic module will operate, including the rules derived from the requirements of this standard (FIPS 140-2) and additional rules imposed by the vendor.verified
Cryptographic Module Validation ProgramnounMWEValidates cryptographic modules to Federal Information Processing Standard (FIPS) 140-2 and other cryptography-based standards. The CMVP is a joint effort between National Institute of Standards and Technology (NIST) and the Communications Security Establishment (CSE) of the government of Canada. Products validated as conforming to FIPS 140-2 are accepted by the federal agencies of both countries for the protection of sensitive information (United States) or Designated Information (Canada). The goal of the CMVP is to promote the use of validated cryptographic modules and provide federal agencies with a security metric to use in procuring equipment containing validated cryptographic modules.verified
Cryptographic ProductnounMWEA cryptographic key (public, private, or shared) or public key certificate, used for encryption, decryption, digital signature, or signature verification; and other items, such as compromised key lists (CKL) and certificate revocation lists (CRL), obtained by trusted means from the same source which validate the authenticity of keys or certificates. Protected software which generates or regenerates keys or certificates may also be considered a cryptographic product.verified
cryptographic protectionnounMWEA category of security control — specifically, the application of cryptographic mechanisms (such as encryption, hashing, message authentication codes, or digital signatures) to enforce one or more security properties — confidentiality, integrity, authenticity, and non-repudiation — for data at rest, in transit, or in backup. Cryptography can provide several security services: confidentiality, identity authentication, data integrity authentication, source authentication, and support for non-repudiation. In standards practice, the expression names a named control enhancement: NIST SP 800-53 uses "Cryptographic Protection" as an enhancement under System and Communications Protection, requiring that information systems implement cryptographic mechanisms to prevent unauthorized disclosure and modification of defined information on defined system components. The field applies it broadly across contexts — covering transmission confidentiality and integrity, backup information, and storage — wherever cryptographic mechanisms are the chosen means of enforcing a security requirement, with the specific operation depending on the algorithm: encrypting or signing data, generating a hash or MAC, or establishing keys.verified
Cryptographic RandomizationnounMWEFunction that randomly determines the transmit state of a cryptographic logic.verified
Cryptographic SecuritynounMWEComponent of COMSEC resulting from the provision of technically sound cryptographic systems and their proper use.verified
Cryptographic StrengthnounMWEA measure of the expected number of operations required to defeat a cryptographic mechanism.verified
Cryptographic SynchronizationnounMWEProcess by which a receiving decrypting cryptographic logic attains the same internal state as the transmitting encrypting logic.verified
Cryptographic SystemnounMWEAssociated information assurance items interacting to provide a single means of encryption or decryption.verified
Cryptographic System AnalysisnounMWEProcess of establishing the exploitability of a cryptographic system, normally by reviewing transmitted traffic protected or secured by the system under study.verified
Cryptographic System EvaluationnounMWEProcess of determining vulnerabilities of a cryptographic system and recommending countermeasures.verified
Cryptographic System ReviewnounMWEExamination of a cryptographic system by the controlling authority ensuring its adequacy of design and content, continued need, and proper distribution.verified
Cryptographic System SurveynounMWEManagement technique in which actual holders of a cryptographic system express opinions on the system's suitability and provide usage information for technical evaluations.verified
Cryptographic TokennounMWEA portable, user-controlled physical device (e.g., smart card or PCMCIA card) used to store cryptographic information and possibly also perform cryptographic functions.verified
Crystal DetectornounMWEa detector consisting of a fine wire in contact with a galena crystalverified
Crystal GazingnounMWEstaring into a crystal ball to arouse visions of future or distant eventsverified
Crystal LatticenounMWEa 3-dimensional geometric arrangement of the atoms or molecules or ions composing a crystalverified
Crystal MicrophonenounMWEa microphone in which sound waves vibrate a piezoelectric crystal that generates a varying voltageverified
Crystal OscillatornounMWEan oscillator that produces electrical oscillations at a frequency determined by the physical characteristics of a piezoelectric quartz crystalverified
Crystal PickupnounMWEa cartridge in which an output voltage is produced by the vibration of a piezoelectric crystalverified
Crystal TeanounMWEevergreen shrub of eastern North America having white or creamy bell-shaped flowers and dark green hairy leaves used for tea during American Revolutionverified
Crystal VioletnounMWEa green crystal (violet in water) used as a dye or stain or bactericide or fungicide or anthelmintic or burn treatmentverified
Cubic DecimeternounMWEa metric unit of capacity, formerly defined as the volume of one kilogram of pure water under standard conditionsverified
Cubic DecimetrenounMWEa metric unit of capacity, formerly defined as the volume of one kilogram of pure water under standard conditionsverified
Cubic KilometernounMWEa unit of capacity equal to the volume of a cube one kilometer on each edgeverified
Cubic KilometrenounMWEa unit of capacity equal to the volume of a cube one kilometer on each edgeverified
Cubic MillimeternounMWEa metric measure of volume or capacity equal to a cube 1 millimeter on each edgeverified
Cubic MillimetrenounMWEa metric measure of volume or capacity equal to a cube 1 millimeter on each edgeverified
Cubital JointnounMWEhinge joint between the forearm and upper arm and the corresponding joint in the forelimb of a quadrupedverified
Cubital NervenounMWEa nerve running along the inner side of the arm and passing near the elbowverified
Cucking StoolnounMWEan instrument of punishment consisting of a chair in which offenders were ducked in waterverified
Cuckoo BreadnounMWEEurasian plant with heart-shaped trifoliate leaves and white purple-veined flowersverified
Cuckoo FlowernounMWEcommon perennial native to Europe and western Asia having usually pink flowers with ragged petalsverified
Cucumber TreenounMWEAmerican deciduous magnolia having large leaves and fruit like a small cucumberverified
Cue SticknounMWEsports implement consisting of a tapering rod used to strike a cue ball in pool or billiardsverified
CUI categoriesnounMWEThose types of information for which laws, regulations, or government-wide policies require or permit agencies to exercise safeguarding or dissemination controls and which the CUI Executive Agent has approved and listed in the CUI Registry. [5]verified
CUI Executive AgentnounMWEThe National Archives and Records Administration (NARA), which implements the executive branch-wide CUI Program and oversees federal agency actions to comply with Executive Order 13556. NARA has delegated this authority to the Director of the Information Security Oversight Office (ISOO). [5]verified
CUI programnounMWEThe executive branch-wide program to standardize CUI handling by all federal agencies. The program includes the rules, organization, and procedures for CUI, established by Executive Order 13556, 32 CFR Part 2002, and the CUI Registry. [5]verified
CUI registrynounMWEThe online repository for all information, guidance, policy, and requirements on handling CUI, including everything issued by the CUI Executive Agent other than 32 CFR Part 2002. Among other information, the CUI Registry identifies all approved CUI categories, provides general descriptions for each, identifies the basis for controls, establishes markings, and includes guidance on handling procedures. [5]verified
CUI transfernounMWEThis is a compositional phrase, not a term of art with a field-specific meaning distinct from its parts. In the CUI regulatory framework — governed by Executive Order 13556, 32 CFR Part 2002, and implemented through NIST SP 800-171 and CMMC — "disseminating" CUI is defined as when authorized holders transmit, transfer, or provide access to CUI to other authorized holders through any means; "transfer" is one item in that list, not a separately defined concept. The CUI program addresses transferring records — for example, requiring authorized holders to decontrol CUI when possible when transferring records to NARA, and to indicate continued control on the appropriate transfer forms when the CUI requires ongoing control. The phrase "CUI transfer" in the sentence you quoted ("transfers between organizations based on data structures and content") is simply applying the ordinary meaning of *transfer* to CUI-bearing data flows, using the surrounding context to specify the scope.verified