Overview
ISO/IEC 18033-2:2006/Amd 2:2026 is an amendment to the international standard for information technology security techniques, with a focus on encryption algorithms. Specifically, this amendment addresses asymmetric ciphers, incorporating recent cryptographic advancements and updating normative references. A major feature of this amendment is the integration of additional key encapsulation mechanisms (KEMs), most notably the Classic McEliece KEM, relevant for post-quantum cryptography.
This standard is maintained by the joint technical committee ISO/IEC JTC 1, subcommittee SC 27, which specializes in information security, cybersecurity, and privacy protection.
Key Topics
- Asymmetric Ciphers: Emphasizes updates to the selection and definitions of public-key encryption and key encapsulation algorithms.
- Classic McEliece KEM: Introduces detailed algorithms, parameter sets, and representations tailored to enhance security against potential quantum computing threats.
- Hybrid Ciphers: Expands the list of generic hybrid ciphers to include mechanisms like ECIES-KEM, RSA-KEM, FrodoKEM, ML-KEM, and more.
- Updated Normative References:
- Key Generation, Encapsulation, and Decapsulation: Specifies standardized methods for creating secure key pairs and performing cryptographic encapsulation and decapsulation, with clear rules for parameter selection and compliance.
- Parameter Set Definitions: Provides formal guidance for parameter set selection, underpinning the security and interoperability of cryptographic implementations.
Applications
Cybersecurity and Data Protection
Organizations implementing secure communications highly benefit from the adoption and compliance with ISO/IEC 18033-2 amendment 2. The inclusion of post-quantum algorithms such as Classic McEliece KEM ensures future-proof encryption, safeguarding both data in transit and at rest against emerging threats.
Typical application areas:
- Data encryption for cloud services
- Secure email and messaging systems
- Virtual private networks (VPNs)
- Secure digital signatures and authentication systems
Post-Quantum Cryptography
As quantum computing evolves, standardized cryptographic techniques must adapt. The newly implemented Classic McEliece KEM is designed for robust resistance to quantum attacks, making this standard a critical reference for forward-looking cryptographic solutions.
Secure Product Development
Vendors and developers of security devices, operating systems, and applications can rely on the rigorously defined mathematical functions, representations, and parameter sets to ensure conformance and maximize interoperability across products adhering to global encryption standards.
Related Standards
For comprehensive implementation and consistent security across systems, ISO/IEC 18033-2:2006/Amd 2:2026 is often used alongside:
- ISO/IEC 10118-3:2018: Security techniques – Hash-functions – Part 3: Dedicated hash-functions (such as SHAKE256).
- ISO/IEC 18033-3:2010: Security techniques – Encryption algorithms – Part 3: Block ciphers.
- Other parts of ISO/IEC 18033: Providing frameworks for symmetric ciphers and additional encryption mechanisms.
- ISO/IEC 19790: Security requirements for cryptographic modules, supporting robust implementation.
Staying updated with these standards enables organizations to meet regulatory requirements, maintain security best practices, and ensure their cryptographic solutions are resistant to both current and future cyber threats.
Open preview (PDF)Information technology — Security techniques — Encryption algorithms — Part 2: Asymmetric ciphers — Amendment 2
