Practice of replacing cryptographic keys periodically to limit blast radius of compromise.