Encryption and Digital Signature Standards

Encryption can be used to safeguard transmitted data, minimize unauthorized access to data during storage, and authenticate the identities of users, terminals and computers. Data encryption shall be used whenever it is the most appropriate method available to protect the confidentiality or integrity of data. Estimating the costs, determining the acceptable level of risk, and deciding to employ cryptographic protections are management functions of the authority responsible for the data. A guide for when and what encryption should be used is contained in the document entitled: Guidance on the Use of Encryption and Digital Signatures for the Protection of Sensitive but Unclassified Information (currently available only within NASA).