@@ -939,21 +939,21 @@ This clause addresses the requirements in the CRA [\[i.1\]](#_ref_i.1) Annex 1 P
- APPLICABILITY: XXXX
- REFERENCE: REQ-PKI-CON-05
- REQUIREMENT: A public key certificate request containing explicit personal data shall be protected in integrity and confidentiality by implementing cryptographic primitives as defined in Annex K.
- REQUIREMENT: A public key certificate request containing explicit personal data shall be protected in integrity and confidentiality by implementing cryptographic mechanisms as defined in Annex K.
- RATIONALE: XXX
- NOTE:XXX
- APPLICABILITY: XXXX
- REFERENCE: REQ-PKI-CON-06
- REQUIREMENT: TODO When a product receives data that has been confidentiality protected by a known key e.g. by the use of encryption, it should have the capability to recover the plain text data. (i.e. the appropriate cryptographic primitives).
- REQUIREMENT: TODO When a product receives data that has been confidentiality protected by a known key e.g. by the use of encryption, it should have the capability to recover the plain text data. (i.e. the appropriate cryptographic mechanisms).
- RATIONALE: XXX
- NOTE:XXX
- APPLICABILITY: XXXX
- REFERENCE: REQ-PKI-CON-07
- REQUIREMENT: The product shall implement cryptographic primitives as defined in Annex K and L to encrypt and decrypt, and sign and verify content.
- REQUIREMENT: The product shall implement cryptographic mechanisms as defined in Annex K and L to encrypt and decrypt, and sign and verify content.
- RATIONALE: XXX
- NOTE: If the product is intended for a specific environment with a defined set of agreed cryptographic primitives, the product has to be able to be used in accordance with those cryptographic requirements.
- NOTE: If the product is intended for a specific environment with a defined set of agreed cryptographic mechanisms, the product has to be able to be used in accordance with those cryptographic requirements.
- APPLICABILITY: XXXX
- REFERENCE: XXX
@@ -965,10 +965,10 @@ This clause addresses the requirements in the CRA [\[i.1\]](#_ref_i.1) Annex 1 P
### 5.6.2 Secure storage and communications
- REFERENCE: REQ-PKI-INT-06
- REQUIREMENT: The product shall implement cryptographic primitives as defined in Annex K and L to encrypt and decrypt content.
- REQUIREMENT: The product shall implement cryptographic mechanisms as defined in Annex K and L to encrypt and decrypt content.
- RATIONALE:
- APPLICABILITY: All use cases where the product implements encryption mechanisms either for data storage or external communications.
- NOTE: If the product is intended for a specific environment with a defined set of agreed cryptographic primitives, the product has to be able to be used in accordance with those cryptographic requirements.
- NOTE: If the product is intended for a specific environment with a defined set of agreed cryptographic mechanisms, the product has to be able to be used in accordance with those cryptographic requirements.
## 5.7 Integrity
@@ -1049,7 +1049,7 @@ This clause addresses the requirements in the CRA [\[i.1\]](#_ref_i.1) Annex 1 P
- REFERENCE: REQ-PKI-DM-04
- REQUIREMENT: The product shall be able to establish and maintain a secure and link with the SCD or KMS, and that the SCD or KMS interfaces are properly called.
- RATIONALE: To ensure the secure key managment, the proper and secure used of exteranl SCD or KMS is required.
- RATIONALE: To ensure the secure key managment, the proper and secure use of exteranl SCD or KMS is required.
