Powered by Lexis+®
Jurisdiction(s):
United Kingdom
CASE STUDY

“We rely on LexisNexis to give us a definitive answer, quickly and reliable every time so that we can be confident in the advice we use to help our clients.”

Shelter

Access all documents on Symmetric encryption (single key)

Symmetric encryption (single key) meaning

What does Symmetric encryption (single key) mean?
Symmetric encryption (single key) describes the use, in practice, of one shared secret key by sender and recipient to encrypt and decrypt information. It is a descriptive technical term rather than a concept defined in UK or Irish legislation or case law. Its legal effect is to protect confidentiality. On its own it does not evidence the identity of the sender, support non-repudiation, or show that content was unaltered. Those assurances require additional controls (for example a message authentication code using the same key, or a digital signature based on asymmetric cryptography; eIDAS electronic signatures rely on the latter). Typical use cases in contracts and data protection compliance are encryption of data at rest (back-ups, devices, databases) and limited secure file transfer between known counterparties. For routine or multi-party communications it is often unsuitable because the secret key must be distributed, rotated and revoked across several users, increasing the risk of loss, compromise or unauthorised use. Across England & Wales, Scotland, Northern Ireland and Ireland, usage and risk assessment are consistent. Encryption is recognised as an appropriate technical measure under UK GDPR/DPA 2018 and the Irish Data Protection Act 2018; parties often reference AES‑256, ISO 27001 and FIPS‑validated cryptographic modules.
Speed up all aspects of your legal work with tools that help you to work faster and smarter. Win cases, close deals and grow your business–all whilst saving time and reducing risk.

View the related Practice Notes about Symmetric encryption (single key)

PRACTICE NOTES
Electronic Signatures in England and Wales: Legal Validity, Statutory Formalities, eIDAS (post-Brexit), Deeds, Smart legal contracts, Cross-border Issues and Best Practice

Electronic signatures This Practice Note sets out the legal position on electronic signatures—also called digital signatures, e‑signatures, E‑Signatures, eSignatures, paperless signing or electronic document signing. It explains the categories of electronic signature and the technology used to generate digital signatures, including public key infrastructure (PKI). It reviews key UK legislation such as the Electronic Communications Act 2000 (ECA 2000) and the UK eIDAS Regulation, and outlines best practice for executing documents by electronic means. An electronic signature functions as the digital counterpart to a handwritten signature, connecting an individual with the contents of an electronic document. The Note focuses on the general law in England and Wales for commercial contracts in a business‑to‑business context. Readers should be aware that particular transactions may present distinct issues, for example due to laws applicable to consumers. For practical guidance on signing when one or more parties to a contract are not physically present, see Practice Note: Virtual execution of documents. For considerations relevant to remote signing, and for links to related materials,...

Read More Right Arrow