PD ISO/IEC/TR 24485:2022 PDF

Information security, cybersecurity and privacy protection. Security techniques. Security properties and best practices for test and evaluation of white box cryptography

Название (английский):

PD ISO/IEC/TR 24485:2022

Information security, cybersecurity and privacy protection. Security techniques. Security properties and best practices for test and evaluation of white box cryptography

Статус документа:: Действующий
Формат:: Электронный (PDF)
Дата публикации:: 31 октября 2022 г.
ICS:: 35.030
Технический комитет:: IEC
SKU:: PD ISO/IEC/TR 24485:2022

Тип поставки:

Full version194 €Read online 24h10 €Read online 72h15 €

Язык документа:

ruen

Срок поставки:1 раб. дн. (перевод)

Цена:194 €

Abstract

1 Scope This document introduces security properties and provides best practices on the test and evaluation of white box cryptography ( WBC ). WBC is a cryptographic algorithm specialized for a key or secret, but where the said key cannot be extracted. The WBC implementation can consist of plain source code for the cryptographic algorithm and/or of a device implementing the algorithm. In both cases, security functions are implemented to deter an attacker from uncovering the key or secret. Security properties consist in the secrecy of security parameters concealed within the implementation of the white box cryptography . Best practices for the test and evaluation includes mathematical and practical analyses, static and dynamic analyses, non-invasive and invasive analyses. This document is related to ISO/IEC 19790 which specifies security requirements for cryptographic modules. In those modules, critical security parameters (CSPs) and public security parameters (PSPs) are the assets to protect. WBC is one solution to conceal CSPs inside of the implementation.

PD ISO/IEC/TR 24485:2022 PDF

Abstract

Похожие стандарты

Abstract

Похожие стандарты

Information technology - Security techniques - Security requirements for cryptographic modules (ISO/IEC 19790…

Guidance on methodology for assessment of stress-rupture data - Computing methods

Health informatics. Reference architecture for syndromic surveillance systems for infectious diseases

Solid biofuels. Characterization of wood chip fuels. Essential information for producers, suppliers and users

Specification and demonstration of system reliability of single-use drug delivery systems

Automation systems and integration. Industrial digital twin interface architecture

Rigid circuit board. Routing parameters

Mains communications systems. Protocol and data integrity and interfaces