Key Lifetime Calculator

Derive the NIST SP 800-57 cryptoperiod for a key type, add the retention tail and check the strength holds that long.

About Key Lifetime Calculator

NIST splits a key's life into an originator-usage period, when you may encrypt or sign with it, and a longer recipient-usage period that must cover every day the protected data has to be readable. The total lifetime is the sum, and the algorithm's strength has to remain adequate across all of it. A key protecting seven years of archived records is exposed to seven years of cryptanalytic and quantum progress, so its strength must be chosen for the retention tail rather than the usage window.

Formula

Key Lifetime

recipient-usage period = originator cryptoperiod + ciphertext retention; NIST guidance is ~2 years for data keys, ~3 for private signing keys.

originator period: Window in which the key may be used to protect data
recipient period: Window in which it may still be used to process protected data
retention: How long the ciphertext or signature must remain verifiable

Worked example

With the default values below, Key Lifetime Calculator returns Recommended Cryptoperiod of 24. Change any input above and every figure here is recalculated in your browser.

Inputs used

Key typeone of Symmetric data-encryption key, Private signature key, Symmetric key-wrapping key, TLS / ephemeral session key: Symmetric data-encryption key
Planned originator-usage periodaccepts 1–240 months: 24 months
Ciphertext retention after last useaccepts 0–50 years: 7 years
Algorithm security strengthone of 112-bit (RSA-2048, 3DES), 128-bit (AES-128, RSA-3072, P-256), 192-bit (AES-192, P-384), 256-bit (AES-256, P-521): 128-bit (AES-128, RSA-3072, P-256)

Results

Recommended Cryptoperiod: 24 months
Recipient-usage Period: 108 months
Total Key Lifetime: 9.0 years
Strength Approved Until: Beyond 2050 against classical attack (NIST SP 800-57)
Assessment: Within NIST guidance for a data-encryption key

Step by step

1Values used
2Key Lifetime
3Recommended Cryptoperiod= 24 months
4Recipient-usage Period= 108 months
5Total Key Lifetime= 9.0 years
6Strength Approved Until= Beyond 2050 against classical attack (NIST SP 800-57)
7Assessment= Within NIST guidance for a data-encryption key

Assumptions and limits

The result is derived only from the 4 inputs listed above. Anything not among them is not part of the calculation.
In particular, this calculator does not take inflation, tax or fees or charges into account.
Figures are rounded for display to 1 decimal place, so totals built from several rounded parts can differ slightly from the unrounded arithmetic.

How these calculators are built and tested is described on the Methodology page. If a figure looks wrong, please report it.

Frequently Asked Questions

How is Key Lifetime calculated?

recipient-usage period = originator cryptoperiod + ciphertext retention; NIST guidance is ~2 years for data keys, ~3 for private signing keys. NIST splits a key's life into an originator-usage period, when you may encrypt or sign with it, and a longer recipient-usage period that must cover every day the protected data has to be readable. The total lifetime is the sum, and the algorithm's strength has to remain adequate across all of it.

Why does Key Lifetime matter?

A key protecting seven years of archived records is exposed to seven years of cryptanalytic and quantum progress, so its strength must be chosen for the retention tail rather than the usage window.

What values do I need to enter?

This calculator takes 4 inputs: Key type, Planned originator-usage period, Ciphertext retention after last use, Algorithm security strength. The pre-filled defaults are a realistic starting point — replace them with figures from your own environment for a result you can act on.

Why is the recipient period longer than the usage period?

You stop encrypting with a key long before you stop needing to decrypt what it protected. The key must survive in escrow for the whole retention tail, which is also why that tail — not the usage window — drives the strength you choose.