@@ -1000,6 +1000,18 @@ This clause addresses the requirements in the CRA [\[i.1\]](#_ref_i.1) Annex 1 P
- RATIONALE: The use of recognized and validated cryptographic algorithms is mandatory for a PKI and thus a PKI product to ensure trust. Known weak or insufficiently validated algorithms are not allowed.
- APPLICABILITY: All use cases.
### 5.7.2 CRL signing
- REFERENCE: REQ-PKI-INT-08
- REQUIREMENT: The product shall create CRL signature only by means of a Secure Cryptographic Device (SCD).
- RATIONALE: To ensure trust the product software must rely on secure and valid key creation and management systems accessible only to authorised users provided by hardware security devices.
- APPLICABILITY: UC3, UC4 and UC5
- REFERENCE: REQ-PKI-INT-09
- REQUIREMENT: The cryptographic mechanisms used to create CRL signatures shall be as stated in Annex K.
- RATIONALE: The use of recognized and validated cryptographic algorithms is mandatory for a PKI and thus a PKI product to ensure trust. Known weak or insufficiently validated algorithms are not allowed.
- APPLICABILITY: All use cases.
## 5.8 Data minimisation
This clause addresses the requirements in the CRA [\[i.1\]](#_ref_i.1) Annex 1 Part 1 (2) (g).
