Cookies
Potřebujeme váš souhlas k využití jednotlivých dat, aby se vám mimo jiné mohly ukazovat informace týkající se vašich zájmů. Souhlas udělíte kliknutím na tlačítko „OK“.
ISO/IEC 11770-3-ed.4.0
Information security - Key management - Part 3: Mechanisms using asymmetric techniques
Přeložit název
NORMA vydána dne 22.10.2021
Informace o normě:
Označení normy: ISO/IEC 11770-3-ed.4.0
Datum vydání normy: 22.10.2021
Kód zboží: NS-1041482
Počet stran: 90
Přibližná hmotnost: 301 g (0.66 liber)
Země: Mezinárodní technická norma
Kategorie: Technické normy ISO
Kategorie - podobné normy:
Anotace textu normy ISO/IEC 11770-3-ed.4.0 :
This document defines key management mechanisms based on asymmetric cryptographic techniques. It specifically addresses the use of asymmetric techniques to achieve the following goals. a) Establish a shared secret key for use in a symmetric cryptographic technique between two entities A and B by key agreement. In a secret key agreement mechanism, the secret key is computed as the result of a data exchange between the two entities A and B. Neither of them is able to predetermine the value of the shared secret key. b) Establish a shared secret key for use in a symmetric cryptographic technique between two entities A and B via key transport. In a secret key transport mechanism, the secret key is chosen by one entity A and is transferred to another entity B, suitably protected by asymmetric techniques. c) Make an entitys public key available to other entities via key transport. In a public key transport mechanism, the public key of entity A is transferred to other entities in an authenticated way, but not requiring secrecy. Some of the mechanisms of this document are based on the corresponding authentication mechanisms in ISO/IEC 9798-3. This document does not cover certain aspects of key management, such as: — key lifecycle management; — mechanisms to generate or validate asymmetric key pairs; and — mechanisms to store, archive, delete, destroy, etc., keys. While this document does not explicitly cover the distribution of an entitys private key (of an asymmetric key pair) from a trusted third party to a requesting entity, the key transport mechanisms described can be used to achieve this. A private key can in all cases be distributed with these mechanisms where an existing, non-compromised key already exists. However, in practice the distribution of private keys is usually a manual process that relies on technological means such as smart cards, etc. This document does not specify the transformations used in the key management mechanisms. NOTE To provide origin authentication for key management messages, it is possible to make provisions for authenticity within the key establishment protocol or to use a public key signature system to sign the key exchange messages.
K této normě náleží tyto změny:
ISO/IEC 11770-3-ed.4.0/Amd.1
Změna
Zobrazit všechny technické informace
Information security - Key management - Part 3: Mechanisms using asymmetric techniques - Amendment 1: TFNS identity-based key agreement
(Securite de l´information - Gestion de cles - Partie 3: Mecanismes utilisant des techniques asymetriques - Amendement 1: Accord de cle basee sur l´identite TFNS)
Změna vydána dne 28.4.2025
Vybrané provedení:Zobrazit všechny technické informace
Doporučujeme:
