Commit 5231bed1 authored by Santeri Toikka's avatar Santeri Toikka
Browse files

Removed duplicate requirement and added a note 

Closes #176
parent 9ba40c59

EN-304-621.md

+2 −1
Original line number Diff line number Diff line
@@ -146,13 +146,14 @@ For low risk: 
- **[REQ-TECH-2]** When privileged information is transferred or accessed, a secure channel shall be used in transport [5.2.1 Secure channel].



For medium risk:

- **[REQ-TECH-4]** The product shall be designed in a way that [5.2.2 Cryptographic key intialisation and rotation] is made possilbe.

- **[REQ-TECH-5]** All system components shall be synchronised to the same time that is acceptable for the system accuracy.



For high risk:

- **[REQ-TECH-6]** All system time drifts shall be monitored.

- **[REQ-TECH-7]** The product shall be designed in a way, that all cryptographic keys can be replaced with user controlled keys.



> Note: REQ-TECH-7 wording is not limited to 'user accessible and controllable' cryptographic keying, but implements the ability for the system user to achieve sovereignty.



### 5.2.1 Secure channel



A **secure channel** referred in [REQ-TECH-2] and used in transportation is a cryptographically protected communication channel, that may be implemented with TLS.