Overview#

Session Key is a relatively short-lived and often single-use Symmetric Key used for encryption of messages in one communication session.

A Session Key should be strong enough to remain secure for the lifespan of the session.

When Session Key are exchanged, they are generally protected with Asymmetric Keys so that Session Keys remain Confidential.

Session Key can be derived from a Hash Function.

Asymmetric Key Cryptography is too slow for many purposes, and all secret key algorithms require that the key is securely distributed. By using an Asymmetric Keys to encrypt the Session Key for another, faster, Symmetric Key overall performance can be improved considerably.

Alternative Names for Session Key#

The terms MAC key, Session Key, and often Symmetric Key are typically used interchangeably and refer to some form of cryptographic keying material established between the client and server.

EDirectory (NICI) Session Key#

EDirectory Session Keys are SASDFM keys

More Information#

There might be more information for this subject on one of the following:

• AP_REP
• AS_REP
• Client-To-Server Session Key
• Cryptographic Key
• CurveZMQ
• Double Ratchet Algorithm
• Kerberos Cryptosystem Negotiation Extension
• Key Distribution Center
• LDAP Signing
• NICI
• NICISDI Keys
• OAuth 2.0 Message Authentication Code (MAC) Tokens
• Perfect Forward Secrecy
• Primary Refresh Token
• SASDFM
• SASDFM key
• Security Domain Infrastructure
• TGS_REP
• TGS_REQ
• TLS PRF
• TLS Session Keys