+CON.1.A13 Operating System Security Requirements When Using Crypto Modules (H)

CON.1.A13 Operating System Security Requirements When Using Crypto Modules (H)

The interaction between the operating system and the crypto modules SHOULD ensure the following:

  • the crypto modules installed cannot be disabled or circumvented without this being noticed.
  • the applied or stored keys cannot be compromised.
  • the data to be protected can only be stored on storage media without encryption or leave the information-processing system with the knowledge of and under the control of the user
  • attempted manipulations of the crypto module will be detected.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.14 Interception of Information / Espionage
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.20 Information or Products from an Unreliable Source
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.46 Loss of Integrity of Sensitive Information