Reference number
ISO/IEC TR 24485:2022
© ISO 2024
Technical Report
ISO/IEC TR 24485:2022
Information security, cybersecurity and privacy protection — Security techniques — Security properties and best practices for test and evaluation of white box cryptography
Edition 1
2022-10
Technical Report
Preview
недоступно на русском языке
Опубликовано (Версия 1, 2022)

ISO/IEC TR 24485:2022

Язык
Формат
CHF 63
Пересчитать швейцарские франки (CHF) в ваша валюта

Тезис

This document introduces security properties and provides best practices on the test and evaluation of white box cryptography (WBC). WBC is a cryptographic algorithm specialized for a key or secret, but where the said key cannot be extracted.

The WBC implementation can consist of plain source code for the cryptographic algorithm and/or of a device implementing the algorithm. In both cases, security functions are implemented to deter an attacker from uncovering the key or secret.

Security properties consist in the secrecy of security parameters concealed within the implementation of the white box cryptography. Best practices for the test and evaluation includes mathematical and practical analyses, static and dynamic analyses, non-invasive and invasive analyses.

This document is related to ISO/IEC 19790 which specifies security requirements for cryptographic modules. In those modules, critical security parameters (CSPs) and public security parameters (PSPs) are the assets to protect. WBC is one solution to conceal CSPs inside of the implementation.

Общая информация

  • Текущий статус
     : Опубликовано
    Дата публикации
     : 2022-10
    Этап
    : Опубликование международного стандарта [60.60]
  • Версия
     : 1
  • Технический комитет :
    ISO/IEC JTC 1/SC 27
    ICS :
    35.030 
  • RSS обновления

Жизненный цикл

Появились вопросы?

Ознакомьтесь с FAQ

  2. Интернет-магазин
  3. Каталог стандартов
  4. МКС
  5. 35
  6. 35.030
  7. ISO/IEC TR 24485:2022