Critical Security Parameter (csp)

The term Critical Security Parameter (CSP) refers to security-related information whose disclosure or modification could compromise a cryptographic module, such as secret keys, authentication data, passwords, or other protected parameters. It gives election, security, legal, or technical readers a specific label for the concept rather than a broader everyday meaning.

Examples of critical security parameters include secret cryptographic keys, passwords or PINs used to control a cryptographic module, authentication secrets, and other protected values whose disclosure or unauthorized modification could compromise security. The exact CSPs are defined by the module or security specification, so public identifiers and nonsecret configuration values are not automatically CSPs.

CSPs should be protected with controls appropriate to their sensitivity, including restricted access, secure generation and storage, approved key-management procedures, integrity protection, controlled loading or export, audit logging, and reliable zeroization when no longer needed. The governing cryptographic standard or module security policy determines the required protections for each parameter.