首页> 美国政府科技报告 >Security Requirements for Cryptographic Modules. Category: Computer Security. Subcategory: Cryptography. (Revised Draft 09/11/09).
【24h】

Security Requirements for Cryptographic Modules. Category: Computer Security. Subcategory: Cryptography. (Revised Draft 09/11/09).

机译:加密模块的安全要求。类别:计算机安全。子类别:密码学。 (经修订的09/11/09草案)。

获取原文

摘要

The selective application of technological and related procedural safeguards is an important responsibility of every Federal organization in providing adequate security in its computer and telecommunication systems. This standard is applicable to all Federal agencies that use cryptographic-based security systems to protect sensitive information in computer and telecommunication systems (including voice systems) as defined in Section 5131 of the Information Technology Management Reform Act of 1996, Public Law 104-106 and the Federal Information Security Management Act of 2002, Public Law 107-347. This standard shall be used in designing and implementing cryptographic modules that Federal departments and agencies operate or are operated for them under contract. The standard provides four increasing, qualitative levels of security intended to cover a wide range of potential applications and environments. The security requirements cover areas related to the secure design, implementation, operation and disposal of a cryptographic module. These areas include cryptographic module specification; cryptographic module physical ports and logical interfaces; roles, authentication, and services; software security; operational environment; physical security; physical security non-invasive attacks; sensitive security parameter management; self-tests; life-cycle assurance; and mitigation of other attacks.

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号