Commit b188b245 authored by Santeri Toikka's avatar Santeri Toikka
Browse files

Switch eavesdropping to crypto definition

parent af73d30f

EN-304-621.md

+11 −11
Original line number Diff line number Diff line
@@ -541,12 +541,12 @@ General requirements: 
-   **[RQ-10]**



| Requirement | Assesment                                                                                                    |

| ----------- | ----------------------------------------------------------------------------------------------------------- |

| ----------- | ------------------------------------------------------------------------------------------------------------ |

| **[RQ-3]**  | See [5.2.3 Appropriate cryptographic libraries](#523-appropriate-cryptographic-libraries)                    |

| **[RQ-4]**  | Deployment of a production distribution exposes only documented interfaces.                                  |

| **[RQ-5]**  | Actions are recorded and can not be modified later.                                                          |

| **[RQ-6]**  | See [5.2.1 Secure channel definition](#521-secure-channel-definition).                                       |

| **[RQ-7]**  | See [5.2.2 Cryptographic key intialization and rotation](#522-cryptographic-key-intialization-and-rotation) |

| **[RQ-7]**  | See [5.2.2 Cryptographic key intialization and rotation](#522-cryptographic-key-intialization-and-rotation). |



### 5.2.1 Secure channel definition
@@ -556,8 +556,8 @@ When TLS is not used to encrypt the traffic in the secure channel, manufacturer 
The chosen method shall follow the intent in the CRA by protecting the data transfer, and protect the confidentiality and integrity of the data according to the requirements of the forseeable use.



|  **[RQ-6]** Assesment                        | Details                                                                                    |

| -------------------------- | --------------------------------------------------------------------------------------------------- |

| Evesdropping from the wire | Third party capturing the channel traffic can not decrypt, understand, modify, resend the traffic.  |

| -------------------------------------------- | ------------------------------------------------------------------------------------------ |

| Appropriate cryptographic libraries are used | See [5.2.4 Appropriate cryptographic libraries](#524-appropriate-cryptographic-libraries)  |

| Mutual trust                                 | All endpoints in a secure channel can cryptographically verify others.                     |



Mutual trust is in plural form not exlucing IP Multicast or Anycast usage if implemented.