Cryptographic key management

A system, comprising:

• a memory sub-system operable to couple with a nonvolatile memory device that is separate from the memory sub-system via a firmware component of the memory sub-system, the memory sub-system configured to:
• receive, by the firmware component and from the nonvolatile memory device, an encrypted first cryptographic key and a second cryptographic key, wherein the encrypted first cryptographic key is for encrypting or decrypting data stored on a memory device of the memory sub-system and different from the nonvolatile memory device;
• generate, by a hardware component of the memory sub-system, an initialization vector based at least in part on the first cryptographic key;
• decrypt, by the hardware component, the encrypted first cryptographic key using the second cryptographic key and the initialization vector;
• and
• store the first cryptographic key in a volatile memory device on the hardware component based at least in part on decrypting the encrypted first cryptographic key.

A non-transitory computer-readable medium storing code, the code comprising instructions executable by processing logic to:

• receive, by a firmware component of a memory sub-system and from a nonvolatile memory device separate from the memory sub-system, an encrypted first cryptographic key and a second cryptographic key, wherein the encrypted first cryptographic key is for encrypting or decrypting data stored on a memory device of the memory sub-system and different from the nonvolatile memory device;
• generate, by a hardware component of the memory sub-system, an initialization vector based at least in part on the first cryptographic key;
• decrypt, by the hardware component, the encrypted first cryptographic key using the second cryptographic key and the initialization vector;
• and
• store the first cryptographic key in a volatile memory device on the hardware component based at least in part on decrypting the encrypted first cryptographic key.