Commit e3217bf3 authored by Santeri Toikka's avatar Santeri Toikka
Browse files

Updated 5.2.1 intro

Closes #309
parent cfdff656
Loading
Loading
Loading
Loading
+3 −1
Original line number Diff line number Diff line
@@ -152,7 +152,9 @@ For high risk:

### 5.2.1 Secure channel

A **secure channel** referred in [REQ-TECH-2] and used in transportation is a cryptographically protected communication channel, that may be implemented with TLS.
A **secure channel** referred in [REQ-TECH-2] and used in transportation is a cryptographically protected communication channel.
When privileged information is transferred or accessed, the transport channel provides confidentiality, integrity protection, endpoint authentication, and protection against downgrade to less secure configurations.
TLS may be used for this purpose, but other mechanisms may also be used where they provide an equivalent level of protection and are implemented as defined in Annex K.

- **[REQ-CRYPTO-0]** The product shall ensure that the channel uses appropriate cryptographic functions and configuration according to the requirements of the foreseeable use.
- **[REQ-TECH-3]** All endpoints in a secure channel shall cryptographically verify others through mutual auhentication.