Loading clauses/K.Cryptography.md +17 −17 Original line number Diff line number Diff line Loading @@ -265,14 +265,14 @@ Table K.1 lists the ACM-extended cryptographic mechanisms specified by the prese **Table K.1: ACM-extended cryptographic mechanisms** | ACM-extended cryptographic mechanism | Type of cryptographic mechanism | Characteristics / parameters | Related product function(s) / use case(s), where applicable | Cryptographic properties | Specification / reference | Conditions or limitations, where applicable | |:-------------------------------------|:--------------------------------|:-------------------------------------------------------------------------------------------------------------------|:------------------------------------------------------------|:---------------------------------------------------|:------------------------------------------------------------------------------------------------------------------|:--------------------------------------------| |:-------------------------------------|:--------------------------------|:-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|:------------------------------------------------------------|:---------------------------------------------------|:------------------------------------------------------------------------------------------------------------------|:--------------------------------------------| | Curve25519 | Primitive | \- | \- | Confidentiality, Authentication, Key Establishment | RFC 7748 [\[3\]](#_ref_3) | | | X25519 | Primitive | 256 bit | TLS, IPC, VPN protocols, key agreement | Key establishment | RFC 7748 [\[3\]](#_ref_3) | | | Ed25519 | Primitive | 256 bit | Package Signature, TLS, IPC, VPN protocols, data signature | Authentication | RFC 8032 [\[4\]](#_ref_4), FIPS 186-5 [\[5\]](#_ref_5) | | | Curve448 | Primitive | \- | \- | Confidentiality, Authentication, Key Establishment | RFC 7748 [\[3\]](#_ref_3) | | | X448 | Primitive | 448 bit | TLS, IPC, VPN protocols | Key establishment | RFC 7748 [\[3\]](#_ref_3) | | | Ed448 | Primitive | 456 bit | Package Signature, TLS, IPC, VPN protocols | Authentication | RFC 8032 [\[4\]](#_ref_4), FIPS 186-5 [\[5\]](#_ref_5) | | | Argon2 | Algorithm | Refer to 4\. Parameter Choice in RFC 9106 [\[6\]](#_ref_6) and the ACN’s guidance.<br />Argon2id, Argon2i, Argon2d | Password-based hashing, Key derivation | Cryptographic hashing, Integrity, Authentication | RFC 9106 [\[6\]](#_ref_6), BSI-TR-02102-1 [\[7\]](#_ref_7), [ACN](https://www.acn.gov.it/portale/en/crittografia) | | | Argon2 | Algorithm | Refer to 4\. Parameter Choice in RFC 9106 [\[6\]](#_ref_6). Minimum allowed configuration for password hashing is argon2id with iteration=2, parallization=1 and memory=19MiB, salt=128bit, digest=128bit as ACN’s guidance.<br />Argon2id, Argon2i, Argon2d | Password-based hashing, Key derivation | Cryptographic hashing, Integrity, Authentication | RFC 9106 [\[6\]](#_ref_6), BSI-TR-02102-1 [\[7\]](#_ref_7), [ACN](https://www.acn.gov.it/portale/en/crittografia) | | | scrypt | Algorithm | Refer to 2\. scrypt Parameters in RFC 7914 [\[8\]](#_ref_8) and the ACN’s guidance. | Password-based hashing,Key derivation | Cryptographic hashing, Integrity, Authentication | RFC 7914 [\[8\]](#_ref_8), [ACN](https://www.acn.gov.it/portale/en/crittografia) | | | ChaCha20 | Algorithm | Key: 256 bit Nonce: 96bit or 192bit (XChaCha), | TLS, data encryption, VPN protocols | confidentiality | RFC 8439 [\[9\]](#_ref_9) | | | Salsa20 | Algorithm | Key: 256 bit Nonce: 64 bit, 192bit (XSalsa20) | data encryption, VPN protocols | confidentiality | RFC 8439 [\[9\]](#_ref_9) | 20 rounds | Loading Loading
clauses/K.Cryptography.md +17 −17 Original line number Diff line number Diff line Loading @@ -265,14 +265,14 @@ Table K.1 lists the ACM-extended cryptographic mechanisms specified by the prese **Table K.1: ACM-extended cryptographic mechanisms** | ACM-extended cryptographic mechanism | Type of cryptographic mechanism | Characteristics / parameters | Related product function(s) / use case(s), where applicable | Cryptographic properties | Specification / reference | Conditions or limitations, where applicable | |:-------------------------------------|:--------------------------------|:-------------------------------------------------------------------------------------------------------------------|:------------------------------------------------------------|:---------------------------------------------------|:------------------------------------------------------------------------------------------------------------------|:--------------------------------------------| |:-------------------------------------|:--------------------------------|:-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|:------------------------------------------------------------|:---------------------------------------------------|:------------------------------------------------------------------------------------------------------------------|:--------------------------------------------| | Curve25519 | Primitive | \- | \- | Confidentiality, Authentication, Key Establishment | RFC 7748 [\[3\]](#_ref_3) | | | X25519 | Primitive | 256 bit | TLS, IPC, VPN protocols, key agreement | Key establishment | RFC 7748 [\[3\]](#_ref_3) | | | Ed25519 | Primitive | 256 bit | Package Signature, TLS, IPC, VPN protocols, data signature | Authentication | RFC 8032 [\[4\]](#_ref_4), FIPS 186-5 [\[5\]](#_ref_5) | | | Curve448 | Primitive | \- | \- | Confidentiality, Authentication, Key Establishment | RFC 7748 [\[3\]](#_ref_3) | | | X448 | Primitive | 448 bit | TLS, IPC, VPN protocols | Key establishment | RFC 7748 [\[3\]](#_ref_3) | | | Ed448 | Primitive | 456 bit | Package Signature, TLS, IPC, VPN protocols | Authentication | RFC 8032 [\[4\]](#_ref_4), FIPS 186-5 [\[5\]](#_ref_5) | | | Argon2 | Algorithm | Refer to 4\. Parameter Choice in RFC 9106 [\[6\]](#_ref_6) and the ACN’s guidance.<br />Argon2id, Argon2i, Argon2d | Password-based hashing, Key derivation | Cryptographic hashing, Integrity, Authentication | RFC 9106 [\[6\]](#_ref_6), BSI-TR-02102-1 [\[7\]](#_ref_7), [ACN](https://www.acn.gov.it/portale/en/crittografia) | | | Argon2 | Algorithm | Refer to 4\. Parameter Choice in RFC 9106 [\[6\]](#_ref_6). Minimum allowed configuration for password hashing is argon2id with iteration=2, parallization=1 and memory=19MiB, salt=128bit, digest=128bit as ACN’s guidance.<br />Argon2id, Argon2i, Argon2d | Password-based hashing, Key derivation | Cryptographic hashing, Integrity, Authentication | RFC 9106 [\[6\]](#_ref_6), BSI-TR-02102-1 [\[7\]](#_ref_7), [ACN](https://www.acn.gov.it/portale/en/crittografia) | | | scrypt | Algorithm | Refer to 2\. scrypt Parameters in RFC 7914 [\[8\]](#_ref_8) and the ACN’s guidance. | Password-based hashing,Key derivation | Cryptographic hashing, Integrity, Authentication | RFC 7914 [\[8\]](#_ref_8), [ACN](https://www.acn.gov.it/portale/en/crittografia) | | | ChaCha20 | Algorithm | Key: 256 bit Nonce: 96bit or 192bit (XChaCha), | TLS, data encryption, VPN protocols | confidentiality | RFC 8439 [\[9\]](#_ref_9) | | | Salsa20 | Algorithm | Key: 256 bit Nonce: 64 bit, 192bit (XSalsa20) | data encryption, VPN protocols | confidentiality | RFC 8439 [\[9\]](#_ref_9) | 20 rounds | Loading
