Overview
ISO/IEC 18033-2:2006/Amd 1:2017 is an international standard from ISO and IEC addressing information technology security, with a focus on encryption algorithms for asymmetric ciphers. This amendment introduces the FACE Key Encapsulation Mechanism (FACE-KEM) to the family of hybrid ciphers and encapsulation mechanisms, expanding the cryptographic options available for securely exchanging keys in public key infrastructures and related applications.
This standard amendment, prepared by ISO/IEC JTC 1/SC 27, forms a crucial part of modern cryptographic frameworks by specifying robust, standardized mechanisms suitable for diverse digital environments.
Key Topics
- Asymmetric Ciphers: The amendment centers on cryptographic algorithms where encryption and decryption keys are different, typically used for secure communication over untrusted networks.
- Hybrid Encryption Schemes: Introduction of FACE-HC, a generic hybrid cipher based on ElGamal encryption, broadening the hybrid construction options.
- Key Encapsulation Mechanisms (KEMs): Inclusion of FACE-KEM in the standard, along with mechanisms such as ECIES-KEM, PSEC-KEM, ACE-KEM, and RSA-KEM.
- Object Identifiers and Parameters: Updates and extensions to the ASN.1 definitions for object identifiers, public keys, and parameter structures to accommodate FACE-KEM.
- Security Properties: Provides details on the provable security of FACE-KEM under standard cryptographic assumptions, specifically security against adaptive chosen ciphertext attack without reliance on the random oracle model.
Applications
The inclusion of FACE-KEM under ISO/IEC 18033-2:2006/Amd 1:2017 provides practical value across a range of cryptographic applications:
- Secure Key Exchange: Enables robust methods for secure distribution of symmetric keys in public key cryptographic protocols.
- Hybrid Encryption Systems: Supports efficient and secure encryption for bulk data transmission by combining asymmetric and symmetric algorithms.
- Public Key Infrastructure (PKI): Contributes to the security and interoperability of PKI implementations, essential for digital signatures, email encryption, and SSL/TLS.
- Standards Compliance: Organizations aiming for compliance with international information security standards can implement FACE-KEM to align with the latest best practices in cryptography.
- Interoperable Security Solutions: Enhances compatibility among security products by providing standardized cryptographic mechanisms.
Related Standards
The amendment fits within a broader ecosystem of standards and best practices for information security and encryption. Key related documents include:
- ISO/IEC 18033-2: The base standard defining asymmetric ciphers for encryption algorithms.
- Other Parts of ISO/IEC 18033: Covering general concepts (Part 1), symmetric ciphers (Part 3), and stream ciphers (Part 4).
- ISO/IEC 19772: Standards for authenticated encryption.
- IEC/ISO JTC 1/SC 27 Portfolio: Encompassing a range of IT security techniques and cryptographic protocols.
- NIST Cryptographic Standards: Widely referenced guidelines, often aligned or cross-referenced with ISO standards.
By expanding the recognized list of key encapsulation and hybrid cipher mechanisms, ISO/IEC 18033-2:2006/Amd 1:2017 ensures the continued evolution of internationally recognized, implementable security techniques for encryption algorithms in modern information technology.
For more technical and implementation details, consult the full ISO/IEC 18033-2 family and supporting documentation from ISO and IEC.
Open preview (PDF)Information technology — Security techniques — Encryption algorithms — Part 2: Asymmetric ciphers — Amendment 1: FACE
