(kē es´krō) (n.) A data security measure in which a cryptographickey is entrusted to a third party (i.e., kept in escrow). Under normal circumstances, the key is not released to someone other than the sender or receiver without proper authorization. Key escrow systems can be considered a security risk at the user puts access to information into the hands of the escrow agent holding the cryptographic key; however, key escrow systems are used to ensure that there is a backup of the cryptographic key in case the parties with access to key lose the data through a disaster or malicious intent.
The Clipper chip brought the idea of key escrow into the public consciousness.
The Risks of Key Escrow This report examines the fundamental properties of key escrow requirements and attempts to outline the technical risks, costs, and implications of deploying systems that provide government access to encryption keys.
