+CON.1.A13 Operating System Security Requirements When Using Crypto Modules (H)

CON.1.A13 Operating System Security Requirements When Using Crypto Modules (H)

The interaction between the operating system and the crypto modules SHOULD ensure the following:

  • the crypto modules installed cannot be disabled or circumvented without this being noticed.
  • the applied or stored keys cannot be compromised.
  • the data to be protected can only be stored on storage media without encryption or leave the information-processing system with the knowledge of and under the control of the user
  • attempted manipulations of the crypto module will be detected.

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
blocks G 0.14 Interception of Information / Espionage
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.46 Loss of Integrity of Sensitive Information