Site Glossary

The planned replacement of cryptographic keys to reduce risk if a key is compromised and to limit the amount of data protected by a single key. Rotation schedules depend on sensitivity, usage frequency, and threat model.