2011-06-04 Is KEK a CSP? As long as the keys encrypted by the KEK are used for approved security functions, yes. If the KEK is used for non-approved security functions (e.g., DES Keys), no.