A physical (usually electronic) token used to store,
transport, and protect cryptographic keys and activation data.
(Compare: dongle, fill device.)
Tutorial: A key-encrypting key could be divided (see: split key)
between a CIK and a cryptographic module, so that it would be
necessary to combine the two to regenerate the key, use it to
decrypt other keys and data contained in the module, and thus
activate the module.