ANSI X 9.24-2:2016

Compliant implementation of the requirements stated in ANS X9.24 Part 1 for the secure management of symmetric TDEA keys requires unique keys per device and strict enforcement of dual control and split knowledge processes for handling the full-length keying material deployed to remote devices or established between communicating pairs. Historically, compliant implementation of key distribution has been a manually performed, physically on-site process that is difficult to manage, costly, and/or non-existent (i.e., not compliant). An automated rather than manual method of distributing symmetric keys could address these issues and could result in improved security.