IT Baseline Protection Manual - The Information Warfare Site

IT Baseline Protection of Generic Components Crypto-concept
_________________________________________________________________________________________
Organisation:
- S 2.161 (1) Development of a cryptographic concept
- S 2.162 (1) Determining the need to use cryptographic procedures and products
- S 2.163 (1) Determining the factors influencing cryptographic procedures and products
- S 2.164 (1) Selection of a suitable cryptographic procedure
- S 2.165 (1) Selection of a suitable cryptographic product
- S 2.166 (1) Provisions governing the use of crypto modules
- S 2.35 (1) Obtaining information on security weaknesses of the system
- S 2.39 (2) Response to violations of security policies
- S 2.46 (2) Appropriate key management
Personnel:
- S 3.4 (1) Training before actual use of a program
- S 3.5 (1) Education on IT security measures
- S 3.23 (1) Introduction to basic cryptographic terms
Hardware & Software:
- S 4.85 (3) Design of suitable interfaces for crypto modules (optional)
- S 4.86 (2) Secure separation of roles and configuration with crypto modules
- S 4.87 (2) Physical security of crypto modules (optional)
- S 4.88 (2) Operating system security requirements when using crypto modules
- S 4.89 (3) Emission security (optional)
- S 4.90 (3) Use of cryptographic procedures on the various layers of the ISO/OSI reference model
Contingency Planning:
- S 6.56 (2) Data backup when using cryptographic procedures
Many other components contain safeguards which touch upon the topic of cryptographic procedures
and can be considered as implementation examples. For example, these include:
- S 4.29 Use of an encryption product for laptop PCs
- S 4.30 Utilisation of the security functions offered in application programs
- S 4.34 Using encryption, checksums or digital signatures
- S 4.41 Use of a suitable PC security product
- S 4.72 Database encryption
- S 5.33 Secure remote maintenance via modem
- S 5.34 Use of one-time passwords
- S 5.36 Encryption under UNIX and Windows NT
- S 5.50 Authentication via PAP/CHAP
_________________________________________________________________________________________
IT-Baseline Protection Manual: Otober 2000