Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual page 820

cryptographic algorithm A set of rules or directions used to perform
cryptographic operations such as encryption and decryption.
Cryptographic Message Syntax (CMS) The syntax used to digitally sign, digest,
authenticate, or encrypt arbitrary messages, such as CMMF.
cryptographic module See PKCS #11 module.
A cryptographic module that performs
cryptographic service provider (CSP)
cryptographic services, such as key generation, key storage, and encryption, on
behalf of software that uses a standard interface such as that defined by PKCS #11
to request such services.
CSP See cryptographic service provider (CSP).
Data Recovery Manager An optional, independent CMS subsystem that
manages the long-term archival and recovery of RSA encryption keys for end
entities. A Certificate Manager or Registration Manager can be configured to
archive end entities' encryption keys with a Data Recovery Manager before issuing
new certificates. The Data Recovery Manager is useful only if end entities are
encrypting data (such as sensitive email) that the organization may need to recover
someday. It can be used only with end entities that support dual key pairs—that is,
two separate key pairs, one for encryption and one for digital signatures.
Data Recovery Manager agent A user who belongs to a group authorized to
manage agent services for a Data Recovery Manager, including managing the
request queue and authorizing recovery operation using HTML-based
administration pages.
Data Recovery Manager recovery agent One of the m of n people who own
portions of the storage key for the Data Recovery Manager.
Data Recovery Manager storage key Special key used by the Data Recovery
Manager to encrypt the end entity's encryption key (after it has been decrypted
with the Data Recovery Manager's private transport key). The storage key never
leaves the Data Recovery Manager.
820 Netscape Certificate Management System Installation and Setup Guide • March 2002