ISO TR 19038-2005 Banking and related financial services - Triple DEA - Modes of operation - Implementation guidelines《银行和相关财经服务 三层DEA 操作模式 实现指南》.pdf
《ISO TR 19038-2005 Banking and related financial services - Triple DEA - Modes of operation - Implementation guidelines《银行和相关财经服务 三层DEA 操作模式 实现指南》.pdf》由会员分享,可在线阅读,更多相关《ISO TR 19038-2005 Banking and related financial services - Triple DEA - Modes of operation - Implementation guidelines《银行和相关财经服务 三层DEA 操作模式 实现指南》.pdf(62页珍藏版)》请在麦多课文档分享上搜索。
1、 Reference number ISO/TR 19038:2005(E) ISO 2005TECHNICAL REPORT ISO/TR 19038 First edition 2005-06-15 Banking and related financial services Triple DEA Modes of operation Implementation guidelines Banque et autres services financiers Triple DEA Modes dopration Lignes directrices pour la mise en uvre
2、 ISO/TR 19038:2005(E) PDF disclaimer This PDF file may contain embedded typefaces. In accordance with Adobes licensing policy, this file may be printed or viewed but shall not be edited unless the typefaces which are embedded are licensed to and installed on the computer performing the editing. In d
3、ownloading this file, parties accept therein the responsibility of not infringing Adobes licensing policy. The ISO Central Secretariat accepts no liability in this area. Adobe is a trademark of Adobe Systems Incorporated. Details of the software products used to create this PDF file can be found in
4、the General Info relative to the file; the PDF-creation parameters were optimized for printing. Every care has been taken to ensure that the file is suitable for use by ISO member bodies. In the unlikely event that a problem relating to it is found, please inform the Central Secretariat at the addre
5、ss given below. ISO 2005 All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and microfilm, without permission in writing from either ISO at the address below or ISOs
6、member body in the country of the requester. ISO copyright office Case postale 56 CH-1211 Geneva 20 Tel. + 41 22 749 01 11 Fax + 41 22 749 09 47 E-mail copyrightiso.org Web www.iso.org Published in Switzerland ii ISO 2005 All rights reservedISO/TR 19038:2005(E) ISO 2005 All rights reserved iiiConten
7、ts Page Foreword iv Introduction v 1 Scope . 1 2 Normative references . 1 3 Terms and definitions. 1 4 Symbols and abbreviations . 4 5 Specifications 5 6 TDEA modes of operation 8 Annex A (informative) ASN.1 syntax for TDEA modes of operation. 36 Annex B (informative) TDEA modes of operation cryptog
8、raphic attributes 42 Annex C (informative) Key bundle encryption precautions. 45 Bibliography . 54 ISO/TR 19038:2005(E) iv ISO 2005 All rights reservedForeword ISO (the International Organization for Standardization) is a worldwide federation of national standards bodies (ISO member bodies). The wor
9、k of preparing International Standards is normally carried out through ISO technical committees. Each member body interested in a subject for which a technical committee has been established has the right to be represented on that committee. International organizations, governmental and non-governme
10、ntal, in liaison with ISO, also take part in the work. ISO collaborates closely with the International Electrotechnical Commission (IEC) on all matters of electrotechnical standardization. International Standards are drafted in accordance with the rules given in the ISO/IEC Directives, Part 2. The m
11、ain task of technical committees is to prepare International Standards. Draft International Standards adopted by the technical committees are circulated to the member bodies for voting. Publication as an International Standard requires approval by at least 75 % of the member bodies casting a vote. I
12、n exceptional circumstances, when a technical committee has collected data of a different kind from that which is normally published as an International Standard (“state of the art”, for example), it may decide by a simple majority vote of its participating members to publish a Technical Report. A T
13、echnical Report is entirely informative in nature and does not have to be reviewed until the data it provides are considered to be no longer valid or useful. Attention is drawn to the possibility that some of the elements of this document may be the subject of patent rights. ISO shall not be held re
14、sponsible for identifying any or all such patent rights. ISO/TR 19038 was prepared by Technical Committee ISO/TC 68, Financial services, Subcommittee SC 2, Security management and general banking operations. ISO/TR 19038:2005(E) ISO 2005 All rights reserved vIntroduction In order to significantly st
15、rengthen DEA (Data Encryption Algorithm) and extend its useful lifetime, the use of Triple Data Encryption Algorithm (TDEA) modes of operation has been recommended. These TDEA modes of operation not only provide greatly increased cryptographic protection, but because they are based on DEA, the TDEA
16、learning curve for users and vendors is reduced. Since certain TDEA modes of operation can be made backward compatible with existing DEA modes of operation, the financial community may leverage its investment in standard DEA technology by using TDEA to extend its secure lifetime. Each mode of operat
17、ion provides different benefits and has different characteristics. The selection, implementation and use of a particular mode of operation is dependent upon the security requirements, risk acceptance posture, and operational needs of the financial institution and are beyond the scope of this Technic
18、al Report. This Technical Report is necessary to provide the basis for interoperability between different parties using any of the TDEA modes specified herein, provided that they use the same mode of operation and share the same secret cryptographic key(s). This Technical Report does not replace the
19、 Data Encryption Algorithm Standard nor the Triple Data Encryption Algorithm specified in ISO/IEC 18033. DEA is the basis for the TDEA modes of operation. TDEA provides increased security in keeping with advances in computing technology and cryptanalytic techniques. TDEA may be implemented in hardwa
20、re, software or a combination of hardware and software. This Technical Report provides implementation guidelines for the modes of operation specified in ISO/IEC 10116. It is the responsibility of the financial institution to put overall security procedures in place with the necessary controls to ens
21、ure that the process is implemented in a secure manner. Furthermore, the process should be audited to ensure compliance with the procedures. TECHNICAL REPORT ISO/TR 19038:2005(E) ISO 2005 All rights reserved 1Banking and related financial services Triple DEA Modes of operation Implementation guideli
22、nes 1 Scope This Technical Report provides the user with technical support and details for the safe and efficient implementation of the Triple Data Encryption Algorithm (TDEA) modes of operation for the enhanced cryptographic protection of digital data. The modes of operation described herein are sp
23、ecified for both enciphering and deciphering operations. The modes described in this Technical Report are implementations of the block cipher modes of operation specified in ISO/IEC 10116 using the Triple DEA algorithm (TDEA) specified in ISO/IEC 18033-3. The TDEA modes of operation may be used in b
24、oth wholesale and retail financial applications. The use of this Technical Report provides the basis for the interoperability of products and facilitates the development of application standards that use the TDEA modes of operation. This Technical Report is intended for use with other ISO standards
- 1.请仔细阅读文档,确保文档完整性,对于不预览、不比对内容而直接下载带来的问题本站不予受理。
- 2.下载的文档,不会出现我们的网址水印。
- 3、该文档所得收入(下载+内容+预览)归上传者、原创作者;如果您是本文档原作者,请点此认领!既往收益都归您。
下载文档到电脑,查找使用更方便
10000 积分 0人已下载
下载 | 加入VIP,交流精品资源 |
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- ISOTR190382005BANKINGANDRELATEDFINANCIALSERVICESTRIPLEDEAMODESOFOPERATIONIMPLEMENTATIONGUIDELINES 银行

链接地址:http://www.mydoc123.com/p-1257791.html