Cloud Key Management

Back to discussions
Expand all | Collapse all

ISO/IEC 11770-7:2021 Information security - Key management - Part 7: Cross-domain password-based authenticated key exchange

  • 1.  ISO/IEC 11770-7:2021 Information security - Key management - Part 7: Cross-domain password-based authenticated key exchange

    Posted Aug 10, 2021 02:48:00 AM
    Hi All,

    ISO/IEC just published ISO/IEC 11770-7:2021 Information security - Key management - Part 7: Cross-domain password-based authenticated key exchange.

    This document specifies mechanisms for cross-domain password-based authenticated key exchange, all of which are four-party password-based authenticated key exchange (4PAKE) protocols. Such protocols let two communicating entities establish a shared session key using just the login passwords that they share with their respective domain authentication servers. The authentication servers assumed to be part of a standard public key infrastructure (PKI), act as ephemeral certification authorities (CAs) that certify key materials that the users can subsequently use to exchange and agree on as a session key.

    This document does not specify the means to be used to establish a shared password between an entity and its corresponding domain server. This document also does not define the implementation of a PKI and the means for two distinct domain servers to exchange or verify their respective public key certificates.

    You can view the preview here: https://www.iso.org/obp/ui/#iso:std:iso-iec:11770:-7:ed-1:v1:en

    You can buy the standard at: https://www.iso.org/standard/80097.html

    ------------------------------
    Michael Roza CPA, CISA, CIA, MBA, Exec MBA
    ------------------------------