Commit 681bd04a authored by Santeri Toikka's avatar Santeri Toikka
Browse files

Review updates to CON_CRYPTO-2 

Closes #663
parent 0c2d98c1

EN-304-621.md

+1 −1
Original line number Diff line number Diff line
@@ -1365,7 +1365,7 @@ As the product is delivered without known exploitable vulnerabilities, those leg 


* **CON_CRYPTO-1** The product shall implement Annex K where relevant.

* **CON_CRYPTO-2** To prevent rollback or downgrade [i.10] the product shall:

    * enforce a monotonic policy/configuration version (or equivalent mechanism);

    * enforce a monotonic cipher suite policy configuration (or equivalent mechanism);

    * preven the re-enabling of deprecated algorithms or the disabling of security checks via  a rollback operation without having an explicit logged administrative override in place.



### 5.7.2 Secure channel