Abstract This paper defines three classes of key management protocol that can be used to establish symmetric cryptographic keys. It explores the relationship between the classes and the communications techniques used to carry data protected by the symmetric keys. The paper also identifies a number of practical issues that need to be considered when selecting, designing and implementing key management protocols. Finally, the paper contains a brief survey of key management protocols with a bias to those used in traditional banking applications and in Internet technology.