ISO_IEC 11770-3-2008 信息技术.安全技术.密钥管理.第3部分_使用不对称技术的机制.pdf

标准号：ISO/IEC 11770-3-2008
实施状态：作废
中文名称：信息技术.安全技术.密钥管理.第3部分:使用不对称技术的机制
英文名称：Information technology - Security techniques - Key management - Part 3: Mechanisms using asymmetric techniques
发布日期：2008-07
被替代标准：ISO/IEC 11770-3-2015
代替标准：ISO/IEC 11770-3-1999;ISO/IEC FDIS 11770-3-2008;ISO/IEC 15946-3-2002
采用标准：ANSI/INCITS/ISO/IEC 11770-3-2009,IDT;BS ISO/IEC 11770-3-2008,IDT;CAN/CSA-ISO/IEC 11770-3-09-2009,IDT
起草单位：ISO/IEC JTC 1/SC 27
标准简介：This part of ISO/IEC 11770 defines key management mechanisms based on asymmetric cryptographic
techniques. It specifically addresses the use of asymmetric techniques to achieve the following goals.
1)  Establish a shared secret key for a symmetric cryptographic technique between two entities A and B by
     key agreement. In a secret key agreement mechanism, the secret key is the result of a data exchange
     between the two entities A and B. Neither of them can predetermine the value of the shared secret key.
2)  Establish a shared secret key for a symmetric cryptographic technique between two entities A and B by
     key transport. In a secret key transport mechanism, the secret key is chosen by one entity A and is
     transferred to another entity B, suitably protected by asymmetric techniques.
3)  Make an entity's public key available to other entities by key transport. In a public key transport
     mechanism, the public key of entity A must be transferred to other entities in an authenticated way, but
     not requiring secrecy.
Some of the mechanisms of this part of ISO/IEC 11770 are based on the corresponding authentication
mechanisms in ISO/IEC 9798-3.
This part of ISO/IEC 11770 does not cover aspects of key management such as
-- keylifecycle management,
-- mechanisms to generate or validate asymmetric key pairs,
-- mechanisms to store, archive, delete, destroy, etc. keys.
While this part of ISO/IEC 11770 does not explicitly cover the distribution of an entity's private key (of an
asymmetric key pair) from a trusted third party to a requesting entity, the key transport mechanisms described
can be used to achieve this. A private key can in all cases be distributed with these mechanisms where an
existing, non-compromised key already exists. However, in practice the distribution of private keys is usually a
manual process that relies on technological means like smart cards, etc.
This part of ISO/IEC 11770 does not cover the implementations of the transformations used in the key
management mechanisms.
NOTE    To achieve authenticity of key management messages, it is possible to make provisions for authenticity within
the key establishment protocol or to use a public key signature system to sign the key exchange messages.
文件格式：PDF
文件大小：559.69KB
文件页数：90
（以上信息更新时间为：2019-11-22）



文档语言及版本参照下方封面截图：