science

Zeroisation

Zeroisation is a science topic covered in the lgStudy science library. This page brings together a partial reference excerpt, illustrations, worked examples, real-world applications and a short study plan, so you can understand Zeroisation rather than just read about it. In short: In cryptography, zeroisation (also spelled zeroization) is the practice of erasing sensitive parameters (electronically stored data, cryptographic keys, and critical security parameters) from a cryptographic module to prevent their disclosure if the equipment is captured. This is generally accomplished by altering or deleting the contents to prevent recovery of the data.

Key takeaways

Zeroisation belongs to science; place it in that map before memorising details.
Learn the definition first, then one example that makes the definition concrete.
Connect Zeroisation to a quantity you can measure, compute or draw — that is where exam questions come from.
Reproduce the core statement of Zeroisation from memory before moving on to harder problems.

Reference excerpt

In cryptography, zeroisation (also spelled zeroization) is the practice of erasing sensitive parameters (electronically stored data, cryptographic keys, and critical security parameters) from a cryptographic module to prevent their disclosure if the equipment is captured. This is generally accomplished by altering or deleting the contents to prevent recovery of the data.

Mechanical When encryption was performed by mechanical devices, this would often mean changing all the machine's settings to some fixed, meaningless value, such as zero. On machines with letter settings rather than numerals, the letter 'O' was often used instead. Some machines had a button or lever for performing this process in a single step. Zeroisation would typically be performed at the end of an encryption session to prevent accidental disclosure of the keys, or immediately when there was a risk of capture by an adversary.

Software In modern software based cryptographic modules, zeroisation is made considerably more complex by issues such as virtual memory, compiler optimisations and use of flash memory. Also, zeroisation may need to be applied not only to the key, but also to a plaintext and some intermediate values. A cryptographic software developer must have an intimate understanding of memory management in a machine, and be prepared to zeroise data whenever a sensitive device might move outside the security boundary. Typically this will involve overwriting the data with zeroes, but in the case of some types of non-volatile storage the process is much more complex; see data remanence. As well as zeroising data due to memory management, software designers consider performing zeroisation:

When an application changes mode (e.g. to a test mode) or user; When a computer process changes privileges; On termination (including abnormal termination); On any error condition which may indicate instability or tampering; Upon user request; Immediately, the last time the parameter is required; and Possibly if a parameter has not been required for some time. Informally, software developers may also use zeroise to mean any overwriting of sensitive data, not necessarily of a cryptographic nature.

Tamper resistant hardware In tamper resistant hardware, automatic zeroisation may be initiated when tampering is detected. Such hardware may be rated for cold zeroisation, the ability to zeroise itself without its normal power supply enabled.

Standards Standards for zeroisation are specified in ANSI X9.17 and FIPS 140-2.

Illustrations

Worked examples

Example 1 — a first encounter with Zeroisation

Start with the simplest possible case. Write down what Zeroisation claims or describes in one sentence, then invent the smallest concrete situation in which that sentence is true. In science, the smallest case is usually a single object, a single equation or a single measurement. Check that every symbol or term in your sentence has a meaning in that case.

Example 2 — changing one variable

Take the situation from Example 1 and change exactly one quantity: double it, halve it, or set it to zero. Predict what should happen to Zeroisation before you calculate. Comparing your prediction with the result is the fastest way to find out whether you understand the idea or only the words.

Example 3 — an exam-style question

Typical questions about Zeroisation ask you to (a) state it precisely, (b) apply it to given data, and (c) explain a limitation. Practise writing all three answers in under five minutes; the third part is what separates a full-mark answer from an average one.

Applications of Zeroisation

In research: Zeroisation appears in science research whenever the underlying quantities have to be modelled precisely. Papers usually cite it as a starting assumption and then explore where it breaks down.
In technology and industry: Engineering practice reuses Zeroisation in design rules, simulations and safety margins. Knowing the idea lets you read a specification sheet and understand why the numbers look the way they do.
In the classroom: Zeroisation is common in secondary-school and first-year university syllabi. It links to neighbouring topics Key management, so understanding it makes those chapters shorter.
In everyday life: Look for Zeroisation outside the textbook — in sport, cooking, traffic, electronics or the sky above you. An example you found yourself is remembered far longer than one you were given.

Ask Teacher Smith questions about this articleOpens your AI tutor with a question about “Zeroisation” →

Affiliate

Preply — study more efficiently by working with a personal tutor. 50% off.

How to study Zeroisation in 20 minutes

Read the reference excerpt below once, without taking notes.
Close the page and write down what Zeroisation means in your own words.
Compare your version with the excerpt and mark what you missed.
Work through the three examples above with pen and paper.
Explain Zeroisation out loud to somebody else — or to Teacher Smith in the lgStudy chat.

Frequently asked questions

What is Zeroisation in simple terms?

Why does Zeroisation matter?

Because it connects several science ideas at once: it gives you a definition you can apply, a quantity you can calculate, and a way to check whether a result is plausible.

How should I study Zeroisation?

Read the excerpt, restate it from memory, then work through the examples and applications listed on this page. The five-step study plan above takes about twenty minutes.

What does this page cover?

It gives you a compact reference excerpt plus original lgStudy explanations, examples, applications and study material on Zeroisation.