ISO/IEC 11770-4:2017
Information technology — Security techniques — Key management — Part 4: Mechanisms based on weak secrets
ISO/IEC 11770-4:2017 defines key establishment mechanisms based on weak secrets, i.e. secrets that can be readily memorized by a human, and hence, secrets that will be chosen from a relatively small set of possibilities. It specifies cryptographic techniques specifically designed to establish one or more secret keys based on a weak secret derived from a memorized password, while preventing offline brute-force attacks associated with the weak secret. ISO/IEC 11770-4:2017 is not applicable to the following aspects of key management:
- life-cycle management of weak secrets, strong secrets, and established secret keys;
- mechanisms to store, archive, delete, destroy, etc. weak secrets, strong secrets, and established secret keys.
| Get this standard | Prices exclude GST | |
|---|---|---|
| PDF ( Single user document) |
$322.61 NZD
|
|
| HardCopy |
$362.61 NZD
|
|
| Networkable PDF |
Price varies
|
Foreword
Introduction
1 Scope
2 Normative reference
3 Terms and definitions
4 Symbols and abbreviated terms
5 Requirements
6 Password-authenticated key agreement
6.1 General
6.2 Balanced Key Agreement Mechanism 1 (BKAM1)
6.2.1 General
6.2.2 Prior shared parameters
6.2.3 Functions
6.2.4 Key agreement operation
6.3 Balanced Key Agreement Mechanism 2 (BKAM2)
6.3.1 General
6.3.2 Prior shared parameters
6.3.3 Functions
6.3.4 Key agreement operation
6.4 Augmented Key Agreement Mechanism 1 (AKAM1)
6.4.1 General
6.4.2 Prior shared parameters
6.4.3 Functions
6.4.4 Key agreement operation
6.5 Augmented Key Agreement Mechanism 2 (AKAM2)
6.5.1 General
6.5.2 Prior shared parameters
6.5.3 Functions
6.5.4 Key agreement operation
6.6 Augmented Key Agreement Mechanism 3 (AKAM3)
6.6.1 General
6.6.2 Prior shared parameters
6.6.3 Functions
6.6.4 Key agreement operation
7 Password-authenticated key retrieval
7.1 General
7.2 Key Retrieval Mechanism 1 (KRM1)
7.2.1 General
7.2.2 Prior shared parameters
7.2.3 Functions
7.2.4 Key retrieval operation
Annex A (normative) Functions for data type conversion
Annex B (normative) Object identifiers
Annex C (informative) Guidance on choice of parameters
Bibliography
Keep me up-to-date
Register to receive notifications when updates are made to this standard.
Related Information
Similar Standards
-
AS/NZS ISO/IEC 27001:2023
Information security, cybersecurity and privacy protection – Information security management systems – Requirements
-
AS/NZS ISO/IEC 27002:2022
Information security, cybersecurity and privacy protection — Information security controls
-
AS/NZS ISO/IEC 27551:2024
Information security, cybersecurity and privacy protection – Requirements for attribute-based unlinkable entity authentication
-
BS 10754-1:2018
Information technology. Systems trustworthiness, Governance and management specification
Foreword
Introduction
1 Scope
2 Normative reference
3 Terms and definitions
4 Symbols and abbreviated terms
5 Requirements
6 Password-authenticated key agreement
6.1 General
6.2 Balanced Key Agreement Mechanism 1 (BKAM1)
6.2.1 General
6.2.2 Prior shared parameters
6.2.3 Functions
6.2.4 Key agreement operation
6.3 Balanced Key Agreement Mechanism 2 (BKAM2)
6.3.1 General
6.3.2 Prior shared parameters
6.3.3 Functions
6.3.4 Key agreement operation
6.4 Augmented Key Agreement Mechanism 1 (AKAM1)
6.4.1 General
6.4.2 Prior shared parameters
6.4.3 Functions
6.4.4 Key agreement operation
6.5 Augmented Key Agreement Mechanism 2 (AKAM2)
6.5.1 General
6.5.2 Prior shared parameters
6.5.3 Functions
6.5.4 Key agreement operation
6.6 Augmented Key Agreement Mechanism 3 (AKAM3)
6.6.1 General
6.6.2 Prior shared parameters
6.6.3 Functions
6.6.4 Key agreement operation
7 Password-authenticated key retrieval
7.1 General
7.2 Key Retrieval Mechanism 1 (KRM1)
7.2.1 General
7.2.2 Prior shared parameters
7.2.3 Functions
7.2.4 Key retrieval operation
Annex A (normative) Functions for data type conversion
Annex B (normative) Object identifiers
Annex C (informative) Guidance on choice of parameters
Bibliography