Public keys do not require storage in one of these forms; which statement is true about public keys?

Public keys do not require storage in one of these forms; which statement is true about public keys?

• A. Public keys do not require storage in one of these forms.
• B. Public keys must be stored in a secure cryptographic device.
• C. Public keys must be stored encrypted with a key-encrypting key.
• D. Public keys must be rotated monthly.

Answer: (A)

Public keys are meant to be shared openly so others can encrypt to you or verify your signatures. Because they’re not secret, there’s no requirement to store a public key in a secure cryptographic device, or to encrypt it with a key-encrypting key, or to rotate it on a fixed schedule. The important controls focus on protecting the private key and ensuring the public key’s authenticity—typically by binding it to an identity through a trusted certificate or directory. So, the form or method of storing a public key isn’t mandated by these security rules; the key point is that the public key remains publicly available while the private key stays protected.

Public keys are meant to be shared openly so others can encrypt to you or verify your signatures. Because they’re not secret, there’s no requirement to store a public key in a secure cryptographic device, or to encrypt it with a key-encrypting key, or to rotate it on a fixed schedule. The important controls focus on protecting the private key and ensuring the public key’s authenticity—typically by binding it to an identity through a trusted certificate or directory. So, the form or method of storing a public key isn’t mandated by these security rules; the key point is that the public key remains publicly available while the private key stays protected.