security strength of any migrated keys shall be equal to the minimum security strength of
any of the following:
•
The security strength of the application key to be migrated
•
The security strength of the Source Security World
•
The security strength of the Destination Security World (which for a v3 Security
World will be 128bits)
It should also be noted that during the procedure of migrating keys to a v3 Security
World, when the migrated keys are outside the nShield HSM’s protected boundary, these
keys are always encrypted with keys of >112 bits security strength.
nShield® Security Manual 48 of 90