Commit d854774a authored by Santeri Toikka's avatar Santeri Toikka
Browse files

Clarified crypto applicability

Closes #38
parent ab5a34af
Loading
Loading
Loading
Loading
+1 −1
Original line number Diff line number Diff line
@@ -142,7 +142,7 @@ When evaluating the applicability of these requirements, the highest of followin
For low risk:
- **[REQ-TECH-0]** The product shall be shipped without unknown interfaces.
- **[REQ-TECH-0]** The product shall not connect to unknown RDPS services.
- **[REQ-TECH-1]** The product shall implement [5.2.4 State-of-the-art cryptographic libraries] to allow the protection of the requirements of the foreseeable use.
- **[REQ-TECH-1]** The product shall implement [5.2.4 State-of-the-art cryptographic libraries] in all interfaces, expect the ones that are available only in localhost.
- **[REQ-TECH-2]** When privileged information is transferred or accessed, a secure channel shall be used in transport [5.2.1 Secure channel].

For medium risk: