DoD Instruction 8500.2 - Common Access Card (CAC)

DODI 8500.2, February 6, 2003
E3.2.4.3.1. Robustness describes the strength of mechanism (e.g., the
strength of a cryptographic algorithm) and assurance properties (i.e., confidence
measures taken to ensure proper mechanism implementation) for an IA solution. The
more robust a particular component is, the greater the level of confidence in the
protection provided to the security services it supports. The three levels of robustness
are discussed in detail in Chapter 4 in the IATF, reference (k). It is also possible to use
non-technical measures to achieve the equivalent of a level of robustness. For
example, physical isolation and protection of a network can be used to provide
confidentiality. In these cases, the technical solution requirement may be reduced or
eliminated.
E3.2.4.3.2. High robustness security services and mechanisms provide,
through rigorous analysis, the most confidence in those security mechanisms.
Generally, high robustness technical solutions require NSA-certified high robustness
solutions for cryptography, access control and key management and high assurance
security design as specified in NSA-endorsed high robustness protection profiles, where
available.
E3.2.4.3.3. Medium robustness security services and mechanisms provide
for additional safeguards above Basic. Medium robustness technical solutions require,
at a minimum, strong (e.g., crypto-based) authenticated access control, NSA-approved
key management, NIST FIPS-validated cryptography, and the assurance properties as
specified in NSA-endorsed medium robustness protection profiles or the Protection
Profile Consistency Guidance for Medium Robustness.
E3.2.4.3.4. Basic robustness security services and mechanisms are
usually represented by good commercial practice. Basic robustness technical solutions
require, at a minimum, authenticated access control, NIST-approved key management
algorithms, NIST FIPS-validated cryptography, and the assurance properties specified in
NSA-endorsed basic robustness protection profiles or the Protection Profile
Consistency Guidance for Basic Robustness.
E3.2.4.3.5. The graded IA controls in attachments 1 through 6 to
enclosure 4 account for robustness and also provide for the use of more robust security
solutions as they become available through evolution of such things as the DoD PKI
program and development of additional U.S. protection profiles.
E3.2.4.4. Integrated technical and non-technical defenses. Achieving an
acceptable level of information assurance is dependent upon a synergy among people,
operations and technology.
33 ENCLOSURE 3