@@ -918,25 +918,23 @@ This clause addresses the requirements in the CRA [\[i.1\]](#_ref_i.1) Annex 1 P
- REFERENCE: REQ-PKI-CON-01
- REQUIREMENT: The product shall provide capabilities to ensure that the private key generated by the product cannot be removed or copied from the product.
- RATIONALE: XXX
- NOTE: Where a device creates a public-private key pair and maintains the related PKC that set (key pair and PKC) can be moved from one physical entity to another within a strictly controlled environment as per use case
- RATIONALE: Private keys are the root of trust in a PKI. When they are not generated or protected by an external SCD or KMS, this requirement ensures that only the product has access to them, protecting them from export, copying, or disclosure.
- NOTE: Where a device creates a public-private key pair and maintains the related PKC that set (key pair and PKC) can be moved from one physical entity to another within a strictly controlled environment as per use case.
- APPLICABILITY: UC1.
- REFERENCE: REQ-PKI-CON-02
- REQUIREMENT: Where the private key is stored in a cryptographically protected way the cryptographic mechanisms shall conform to the general state of the art as defined in Annex K, or to the sector specific cryptographic mechanisms cited in Annex ??.
- RATIONALE: XXX
- NOTE:XXX
- APPLICABILITY: XXX
- REQUIREMENT: Where the private key is stored in a cryptographically protected way, the cryptographic mechanisms shall conform to the general state of the art as defined in Annex K.
- RATIONALE: The use of recognized and validated cryptographic algorithms is mandatory for a PKI and thus a PKI product to ensure trust. Known weak or insufficiently validated algorithms are not allowed.
- APPLICABILITY: UC2, UC3, UC4 and UC5
- REFERENCE: REQ-PKI-CON-03
- REQUIREMENT: If a pseudonymous certificate is used to exchange a public key related to an ephemeral identity the product shall ensure that no data is contained in the cert that can be used to break the pseudonymity of the sender.
- RATIONALE: XXX
- NOTE:XXX
- REQUIREMENT: If a pseudonymous certificate is used to exchange a public key related to an ephemeral identity the product shall ensure that no data is contained in the certificate that can be used to break the pseudonymity of the sender.
- RATIONALE: Pseudonymous certificates are designed to ensure privacy. If these certificates include data that can be linked to the user, the privacy protection is compromised, defeating the purpose of pseudonymity. This requires that the PKI product is designed to create pseudonymous certificates containing only fields that provide technical information unrelated to the user.
- APPLICABILITY: UC5
- REFERENCE: REQ-PKI-CON-04
- REQUIREMENT: TODO If the product sends data intended/labelled as personal or sensitive to another entity the product shall ensure that such data is protected from eavesdropping.
- RATIONALE: XXX
- REQUIREMENT: If the product sends data intended/labelled as personal or sensitive to another entity the product shall ensure that such data is protected from eavesdropping in a cryptographically protected way. The cryptographic mechanisms shall conform to the general state of the art as defined in Annex K.
- RATIONALE: Analysis has to be performed and justified by the developper to ensure that the product protects personal and sensitive data. This requires to define what data are considered personnal or sensitive.
