ISO/IEC 11770-2-2008 信息技术.安全技术.密钥管理.第2部分:对称技术机制
作者:标准资料网
时间:2024-05-17 10:16:54
浏览:9354
来源:标准资料网
下载地址: 点击此处下载
【英文标准名称】:Informationtechnology-Securitytechniques-Keymanagement-Part2:Mechanismsusingsymmetrictechniques
【原文标准名称】:信息技术.安全技术.密钥管理.第2部分:对称技术机制
【标准号】:ISO/IEC11770-2-2008
【标准状态】:现行
【国别】:国际
【发布日期】:2008-06
【实施或试行日期】:
【发布单位】:国际标准化组织(IX-ISO)
【起草单位】:ISO/IECJTC1
【标准类型】:()
【标准水平】:()
【中文主题词】:算法;真实性试验;数据处理;数据保护;数据传输;定义;信息交换;信息技术;IT安全;管理;安全工程
【英文主题词】:Algorithms;Authenticitytests;Dataprocessing;Dataprotection;Datatransmission;Definitions;Informationinterchange;Informationtechnology;ITsecurity;Management;Safetyengineering
【摘要】:Thepurposeofkeymanagementistoprovideproceduresforhandlingcryptographickeyingmaterialtobeusedinsymmetricorasymmetriccryptographicalgorithmsaccordingtothesecuritypolicyinforce.ThispartofISO/IEC11770defineskeyestablishmentmechanismsusingsymmetriccryptographictechniques.KeyestablishmentmechanismsusingsymmetriccryptographictechniquescanbederivedfromtheentityauthenticationmechanismsofISO/IEC9798-2andISO/IEC9798-4byspecifyingtheuseoftextfieldsavailableinthosemechanisms.Otherkeyestablishmentmechanismsexistforspecificenvironments;see,forexample,ISO8732.Besideskeyestablishment,thegoalsofsuchamechanismmightincludeunilateralormutualauthenticationofthecommunicatingentities.Furthergoalsmightbetheverificationoftheintegrityoftheestablishedkey,orkeyconfirmation.ThispartofISO/IEC11770addressesthreeenvironmentsfortheestablishmentofkeys:Point-to-Point,KeyDistributionCentre(KDC),andKeyTranslationCentre(KTC).ThispartofISO/IEC11770describestherequiredcontentofmessageswhichcarrykeyingmaterialorarenecessarytosetuptheconditionsunderwhichthekeyingmaterialcanbeestablished.Itdoesnotindicateotherinformationwhichcanbecontainedinthemessagesorspecifyothermessagessuchaserrormessages.TheexplicitformatofmessagesisnotwithinthescopeofthispartofISO/IEC11770.ThispartofISO/IEC11770doesnotspecifythemeanstobeusedtoestablishinitialsecretkeys;thatis,allthemechanismsspecifiedinthispartofISO/IEC11770requireanentitytoshareasecretkeywithatleastoneotherentity(e.g.aTTP).ForgeneralguidanceonthekeylifecycleseeISO/IEC11770-1.ThispartofISO/IEC11770doesnotexplicitlyaddresstheissueofinterdomainkeymanagement.ThispartofISO/IEC11770alsodoesnotdefinetheimplementationofkeymanagementmechanisms;productscomplyingwiththispartofISO/IEC11770mightnotbecompatible.
【中国标准分类号】:L80
【国际标准分类号】:35_040
【页数】:32P.;A4
【正文语种】:英语
【原文标准名称】:信息技术.安全技术.密钥管理.第2部分:对称技术机制
【标准号】:ISO/IEC11770-2-2008
【标准状态】:现行
【国别】:国际
【发布日期】:2008-06
【实施或试行日期】:
【发布单位】:国际标准化组织(IX-ISO)
【起草单位】:ISO/IECJTC1
【标准类型】:()
【标准水平】:()
【中文主题词】:算法;真实性试验;数据处理;数据保护;数据传输;定义;信息交换;信息技术;IT安全;管理;安全工程
【英文主题词】:Algorithms;Authenticitytests;Dataprocessing;Dataprotection;Datatransmission;Definitions;Informationinterchange;Informationtechnology;ITsecurity;Management;Safetyengineering
【摘要】:Thepurposeofkeymanagementistoprovideproceduresforhandlingcryptographickeyingmaterialtobeusedinsymmetricorasymmetriccryptographicalgorithmsaccordingtothesecuritypolicyinforce.ThispartofISO/IEC11770defineskeyestablishmentmechanismsusingsymmetriccryptographictechniques.KeyestablishmentmechanismsusingsymmetriccryptographictechniquescanbederivedfromtheentityauthenticationmechanismsofISO/IEC9798-2andISO/IEC9798-4byspecifyingtheuseoftextfieldsavailableinthosemechanisms.Otherkeyestablishmentmechanismsexistforspecificenvironments;see,forexample,ISO8732.Besideskeyestablishment,thegoalsofsuchamechanismmightincludeunilateralormutualauthenticationofthecommunicatingentities.Furthergoalsmightbetheverificationoftheintegrityoftheestablishedkey,orkeyconfirmation.ThispartofISO/IEC11770addressesthreeenvironmentsfortheestablishmentofkeys:Point-to-Point,KeyDistributionCentre(KDC),andKeyTranslationCentre(KTC).ThispartofISO/IEC11770describestherequiredcontentofmessageswhichcarrykeyingmaterialorarenecessarytosetuptheconditionsunderwhichthekeyingmaterialcanbeestablished.Itdoesnotindicateotherinformationwhichcanbecontainedinthemessagesorspecifyothermessagessuchaserrormessages.TheexplicitformatofmessagesisnotwithinthescopeofthispartofISO/IEC11770.ThispartofISO/IEC11770doesnotspecifythemeanstobeusedtoestablishinitialsecretkeys;thatis,allthemechanismsspecifiedinthispartofISO/IEC11770requireanentitytoshareasecretkeywithatleastoneotherentity(e.g.aTTP).ForgeneralguidanceonthekeylifecycleseeISO/IEC11770-1.ThispartofISO/IEC11770doesnotexplicitlyaddresstheissueofinterdomainkeymanagement.ThispartofISO/IEC11770alsodoesnotdefinetheimplementationofkeymanagementmechanisms;productscomplyingwiththispartofISO/IEC11770mightnotbecompatible.
【中国标准分类号】:L80
【国际标准分类号】:35_040
【页数】:32P.;A4
【正文语种】:英语
下载地址:
点击此处下载