Why Key Rotation
/via https://bit.ly/2HKytRW If you have encrypted data up there in the cloud (•) you’ve probably run across key rotation . It’s good practice — very good practice — and exists for some fairly straightforward reasons • Encryption stales . Sometimes it’s just a matter of time (DES was awesome in 1977. Now, not so much). So if your encryption algorithm can be broken in N years, you probably want to rotate it in some period smaller than N , no? And yeah, N isn’t necessarily “ heat death of the universe ” because you’re using 4096-bit keys. Things change — key leaks, quantum encryption, NSA loopholes , whatever. The safe thing to do is just rotate your signing key — and, potentially, the algorithm too !— every so often (••) • Keys Leak . It happens, and for a host of reasons, ranging from “ whyTF did you write it down on a Post-it? ” to state-actors. In either case, keys do leak. The safe thing to do is rotate yo...