ISO IEC 9798-1 pdf download

ISO IEC 9798-1 pdf download Information technology — Security techniques — Entity authentication — Part 1: General
1 Scope
This part of ISO/IEC 9798 specifies an authentication model and general requirements and constraints for entity authentication mechanisms which use security techniques. These mechanisms are used to corroborate that an entity is the one that is claimed. An entity to be authenticated proves its identity by showing its knowledge of a secret. The mechanisms are defined as exchanges of information between entities and, where required, exchanges with a trusted third party.
The details of the mechanisms and the contents of the authentication exchanges are given in subsequent parts of ISO/IEC 9798.
2 Normative references
There are no normative references for this part of ISO/IEC 9798.
3 Terms and definitions
For the purposes of this document, the following terms and definitions apply.
3.1
asymmetric cryptographic technique
cryptographic technique that uses two related transformations: a public transformation (defined by the public key) and a private transformation (defined by the private key)
NOTE The two transformations have the property that, given the public transformation, it is computationally infeasible to derive the private transformation.
3.2
asymmetric encryption system
system based on asymmetric cryptographic techniques whose public operation is used for encryption and whose private operation is used for decryption
3.3
asymmetric key pair
pair of related keys where the private key defines the private transformation and the public key defines the public transformation
3.4
asymmetric signature system
system based on asymmetric cryptographic techniques whose private transformation is used for signing and whose public transformation is used for verification
3.5
challenge
data item chosen at random and sent by the verifier to the claimant, which is used by the claimant, in conjunction with secret information held by the claimant, to generate a response which is sent to the verifier
3.6
claimant
entity which is or represents a principal for the purposes of authentication
NOTE A claimant includes the functions and the private data necessary for engaging in authentication exchanges on behalf of a principal.
3.7
ciphertext
data which has been transformed to hide its information content
3.8
cryptographic check function
cryptographic transformation which takes as input a secret key and an arbitrary string, and which gives a cryptographic check value as output
NOTE The computation of a correct check value without knowledge of the secret key shall be infeasible.
3.9
cryptographic check value
information which is derived by performing a cryptographic transformation on the data unit
3.10
decryption
reversal of a corresponding encryption
3.11
digital signature (signature)
data appended to, or a cryptographic transformation of, a data unit that allows the recipient of the data unit to prove the source and integrity of the data unit and protect against forgery, e.g. by the recipient
3.12
distinguishing identifier
information which unambiguously distinguishes an entity in the context of an authentication exchange