File Encryption Key
/ˌɛf iː ˈkeɪ/
noun — "file encryption key."
FEK, short for File Encryption Key, is a symmetric cryptographic key used to encrypt and decrypt the contents of a single file within systems like EFS. Each file protected by a filesystem-level encryption mechanism typically has its own unique FEK to ensure isolation and minimize the risk of large-scale data compromise if one key is exposed.
KSK
/ˌkeɪ-ɛs-ˈkeɪ/
n. “The master key that vouches for all zone signatures in DNSSEC.”
KSK, short for Key Signing Key, is a cryptographic key used in DNSSEC (Domain Name System Security Extensions) to sign the Zone Signing Keys (ZSKs) of a DNS zone. Unlike the ZSK, which signs individual DNS records, the KSK signs the keys themselves, creating a trust chain that allows resolvers to verify the authenticity of the DNS data.
ZSK
/ˌziː-ɛs-ˈkeɪ/
n. “The key that signs your DNS zone like a digital seal.”
ZSK, short for Zone Signing Key, is a cryptographic key used in DNSSEC (Domain Name System Security Extensions) to digitally sign the records within a DNS zone. It ensures the integrity and authenticity of the DNS data, allowing resolvers to verify that the information has not been tampered with.
Key characteristics of a ZSK include: