1、Information technology Security techniques Key management Part 2: Mechanisms using symmetric techniquesCAN/CSA-ISO/IEC 11770-2-09National Standard of Canada(ISO/IEC 11770-2:2008, IDT)NOT FOR RESALE.PUBLICATION NON DESTINE LA REVENTE.Legal Notice for StandardsCanadian Standards Association (CSA) stan
2、dards are developed through a consensus standards development process approved by the Standards Council of Canada. This process brings together volunteers representing varied viewpoints and interests to achieve consensus and develop a standard. Although CSA administers the process and establishes ru
3、les to promote fairness in achieving consensus, it does not independently test, evaluate, or verify the content of standards.Disclaimer and exclusion of liabilityThis document is provided without any representations, warranties, or conditions of any kind, express or implied, including, without limit
4、ation, implied warranties or conditions concerning this documents fitness for a particular purpose or use, its merchantability, or its non-infringement of any third partys intellectual property rights. CSA does not warrant the accuracy, completeness, or currency of any of the information published i
5、n this document. CSA makes no representations or warranties regarding this documents compliance with any applicable statute, rule, or regulation. IN NO EVENT SHALL CSA, ITS VOLUNTEERS, MEMBERS, SUBSIDIARIES, OR AFFILIATED COMPANIES, OR THEIR EMPLOYEES, DIRECTORS, OR OFFICERS, BE LIABLE FOR ANY DIREC
6、T, INDIRECT, OR INCIDENTAL DAMAGES, INJURY, LOSS, COSTS, OR EXPENSES, HOWSOEVER CAUSED, INCLUDING BUT NOT LIMITED TO SPECIAL OR CONSEQUENTIAL DAMAGES, LOST REVENUE, BUSINESS INTERRUPTION, LOST OR DAMAGED DATA, OR ANY OTHER COMMERCIAL OR ECONOMIC LOSS, WHETHER BASED IN CONTRACT, TORT (INCLUDING NEGLI
7、GENCE), OR ANY OTHER THEORY OF LIABILITY, ARISING OUT OF OR RESULTING FROM ACCESS TO OR POSSESSION OR USE OF THIS DOCUMENT, EVEN IF CSA HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES, INJURY, LOSS, COSTS, OR EXPENSES.In publishing and making this document available, CSA is not undertaking to re
8、nder professional or other services for or on behalf of any person or entity or to perform any duty owed by any person or entity to another person or entity. The information in this document is directed to those who have the appropriate degree of experience to use and apply its contents, and CSA acc
9、epts no responsibility whatsoever arising in any way from any and all use of or reliance on the information contained in this document. CSA is a private not-for-profit company that publishes voluntary standards and related documents. CSA has no power, nor does it undertake, to enforce compliance wit
10、h the contents of the standards or other documents it publishes. Intellectual property rights and ownershipAs between CSA and the users of this document (whether it be in printed or electronic form), CSA is the owner, or the authorized licensee, of all works contained herein that are protected by co
11、pyright, all trade-marks (except as otherwise noted to the contrary), and all inventions and trade secrets that may be contained in this document, whether or not such inventions and trade secrets are protected by patents and applications for patents. Without limitation, the unauthorized use, modific
12、ation, copying, or disclosure of this document may violate laws that protect CSAs and/or others intellectual property and may give rise to a right in CSA and/or others to seek legal redress for such use, modification, copying, or disclosure. To the extent permitted by licence or by law, CSA reserves
13、 all intellectual property rights in this document.Patent rightsAttention is drawn to the possibility that some of the elements of this standard may be the subject of patent rights. CSA shall not be held responsible for identifying any or all such patent rights. Users of this standard are expressly
14、advised that determination of the validity of any such patent rights is entirely their own responsibility.Authorized use of this documentThis document is being provided by CSA for informational and non-commercial use only. The user of this document is authorized to do only the following:If this docu
15、ment is in electronic form:.load this document onto a computer for the sole purpose of reviewing it;.search and browse this document; and.print this document if it is in PDF format. Limited copies of this document in print or paper form may be distributed only to persons who are authorized by CSA to
16、 have such copies, and only if this Legal Notice appears on each such copy.In addition, users may not and may not permit others to.alter this document in any way or remove this Legal Notice from the attached standard;.sell this document without authorization from CSA; or.make an electronic copy of t
17、his document.If you do not agree with any of the terms and conditions contained in this Legal Notice, you may not load or use this document or make any copies of the contents hereof, and if you do make such copies, you are required to destroy them immediately. Use of this document constitutes your a
18、cceptance of the terms and conditions of this Legal Notice.Information technology Security techniques Key management Part 2: Mechanisms using symmetric techniquesTechnical Corrigendum 1:2010 (IDT) toNational Standard of CanadaCAN/CSA-ISO/IEC 11770-2-09(ISO/IEC 11770-2:2008, IDT)NOT FOR RESALE.PUBLIC
19、ATION NON DESTINE LA REVENTE.CSA Standards Update ServiceTechnical Corrigendum 1:2010 toCAN/CSA-ISO/IEC 11770-2-09December 2010Title:Information technology Security techniques Ke y management Part 2: Mechanisms using symmetric techniquesPagination: 1 pageTo register for e-mail notification about any
20、 updates to this publicationgo to www.shopcsa.caclick on E-mail Services under MY ACCOUNTclick on CSA Standards Update ServiceThe List ID that you will need to register for updates to this publication is 2419914.If you require assistance, please e-mail techsupportcsa.ca or call 416-747-2233.Visit CS
21、As policy on privacy at www.csagroup.org/legal to find out how we protect your personal information.ICS 35.040 Ref. No. ISO/IEC 11770-2:2008/Cor.1:2009(E) ISO/IEC 2009 All rights reserved INTERNATIONAL STANDARD ISO/IEC 11770-2:2008 TECHNICAL CORRIGENDUM 1 Published 2009-09-15 INTERNATIONAL ORGANIZAT
22、ION FOR STANDARDIZATION ORGANISATION INTERNATIONALE DE NORMALISATIONINTERNATIONAL ELECTROTECHNICAL COMMISSION COMMISSION LECTROTECHNIQUE INTERNATIONALEInformation technology Security techniques Key management Part 2: Mechanisms using symmetric techniques TECHNICAL CORRIGENDUM 1 Technologies de linfo
23、rmation Techniques de scurit Gestion de cls Partie 2: Mcanismes utilisant des techniques symtriques RECTIFICATIF TECHNIQUE 1 Technical Corrigendum 1 to ISO/IEC 11770-2:2008 was prepared by Joint Technical Committee ISO/IEC JTC 1, Information technology, Subcommittee SC 27, IT Security techniques. Pa
24、ge 3, Clause 4 Replace the definition of X |Y with the following: The result of the concatenation of data items X and Y in the order specified. In cases where the result of concatenating two or more data items is encrypted as part of one of the mechanisms specified in this part of ISO/IEC 11770, thi
25、s result shall be composed so that it can be uniquely resolved into its constituent data strings, i.e. so that there is no possibility of ambiguity in interpretation. This latter property could be achieved in a variety of different ways, depending on the application. For example, it could be guarant
26、eed by (a) fixing the length of each of the substrings throughout the domain of use of the mechanism, or (b) encoding the sequence of concatenated strings using a method that guarantees unique decoding, e.g. using the distinguished encoding rules defined in ISO/IEC 8825-1 12. Technical Corrigendum 1
27、:2010 to CAN/CSA-ISO/IEC 11770-2-09ISO/IEC 11770-2:2008/Cor.1:2009(E) 2 ISO/IEC 2009 All rights reservedPage 27, Bibliography Add the following at the end of the bibliography: 12 ISO/IEC 8825-1, Information technology ASN.1 encoding rules: Specification of Basic Encoding Rules (BER), Canonical Encod
28、ing Rules (CER) and Distinguished Encoding Rules (DER) Technical Corrigendum 1:2010 to CAN/CSA-ISO/IEC 11770-2-09Copyright NoticeThis Amendment to the International Standard contains information copyright protected by the International Organization for Standardization (ISO) and the International Ele
29、ctrotechnical Commission (IEC). Except as permitted under the laws of Canada, no extract of this Amendment to the International Standard may be reproduced, stored in any retrieval system, or transmitted in any form or by any means, electronic, photocopying, recording, or otherwise, without prior per
30、mission from the Standards Council of Canada (SCC). Requests for permission to reproduce this Amendment to the International Standard or parts thereof should be addressed to Manager, Technical Document Centre Standards Council of Canada 270 Albert Street, Suite 200 Ottawa, Ontario K1P 6N7 The Canadi
31、an adoption of this Amendment to the International Standard contains information copyright protected by the Canadian Standards Association. All rights reserved. No part of this adopted Amendment may be reproduced in any form whatsoever without the prior permission of the publisher. ISO/IEC material
32、is reprinted with permission. Requests for permission to reproduce this adopted Amendment or parts thereof should be addressed to Manager, Sales Canadian Standards Association 5060 Spectrum Way, Suite 100 Mississauga, Ontario L4W 5N6Copyright violators will be prosecuted to the full extent of the la
33、w.PRINTED IN CANADAIMPRIMEAU CANADA100%The Canadian Standards Association (CSA) prints its publications on Rolland Enviro100, which contains 100%recycled post-consumer fibre, is EcoLogo and Processed Chlorine Free certified, and was manufactured using biogas energy.CSA Standards Update ServiceCAN/CS
34、A-ISO/IEC 11770-2-09October 2009Title:Information technology Security techniques Ke y management Part 2: Mechanisms using symmetric techniquesPagination:36 pages (CSA/1CSA/5, iiv, and 27 text)To register for e-mail notification about any updates to this publicationgo to www.ShopCSA.caclick on E-mail
35、 Services under MY ACCOUNTclick on CSA Standards Update ServiceThe List ID that you will need to register for updates to this publication is 2419914.If you require assistance, please e-mail techsupportcsa.ca or call 416-747-2233.Visit CSAs policy on privacy at www.csagroup.org/legal to find out how
36、we protect your personal information.TheCanadianStandardsAssociation(CSA),under whose auspices this National Standard hasbeen produced, was chartered in 1919 andaccredited by the Standards Council of Canadato the National Standards system in 1973. It is anot-for-profit, nonstatutory, voluntary membe
37、rshipassociation engaged in standards development andcertification activities.CSA standards reflect a national consensus ofproducers and users including manufacturers,consumers, retailers, unions and professionalorganizations, and governmental agencies. Thestandards are used widely by industry and c
38、ommerceand often adopted by municipal, provincial, andfederal governments in their regulations, particularlyin the fields of health, safety, building andconstruction, and the environment.Individuals, companies, and associations acrossCanada indicate their support for CSAs standardsdevelopment by vol
39、unteering their time and skillsto CSA Committee work and supporting theAssociations objectives through sustainingmemberships. The more than 7000 committeevolunteers and the 2000 sustaining membershipstogether form CSAs total membership from whichits Directors are chosen. Sustaining membershipsrepres
40、ent a major source of income for CSAsstandards development activities.The Association offers certification and testingservices in support of and as an extension to itsstandards development activities. To ensure theintegrity of its certification process, the Associationregularly and continually audit
41、s and inspects productsthat bear the CSA Mark.In addition to its head office and laboratorycomplex in Toronto, CSA has regional branch officesin major centres across Canada and inspection andtesting agencies in eight countries. Since 1919, theAssociation has developed the necessary expertise tomeet
42、its corporate mission: CSA is an independentservice organization whose mission is to provide anopen and effective forum for activities facilitating theexchange of goods and services through the use ofstandards, certification and related services to meetnational and international needs.For further in
43、formation on CSA services, write toCanadian Standards Association5060 Spectrum Way, Suite 100Mississauga, Ontario, L4W 5N6CanadaTheStandardsCouncilofCanada(SCC) is thecoordinating body of the National StandardsSystem, a coalition of independent, autonomousorganizations working towards the furtherdev
44、elopment and improvement of voluntarystandardization in the national interest.The principal objects of the SCC are to fosterand promote voluntary standardization as a meansof advancing the national economy, benefiting thehealth, safety, and welfare of the public, assistingand protecting the consumer
45、, facilitating domesticand international trade, and furthering internationalcooperation in the field of standards.A National Standard of Canada (NSC) is a standardprepared or reviewed by an accredited StandardsDevelopment Organization (SDO) and approvedby the SCC according to the requirements of CAN
46、-P-2.Approval does not refer to the technical content of thestandard; this remains the continuing responsibility ofthe SDO. An NSC reflects a consensus of a number ofcapable individuals whose collective interests provide,to the greatest practicable extent, a balance ofrepresentation of general inter
47、ests, producers,regulators, users (including consumers), and otherswith relevant interests, as may be appropriate to thesubject in hand. It normally is a standard which iscapable of making a significant and timely contributionto the national interest.Those who have a need to apply standards areencou
48、raged to use NSCs. These standards are subjectto periodic review. Users of NSCs are cautionedto obtain the latest edition from the SDO whichpublishes the standard.The responsibility for approving standards asNational Standards of Canada rests with theStandards Council of Canada270 Albert Street, Sui
49、te 200Ottawa, Ontario, K1P 6N7CanadaAlthoughtheintendedprimaryapplicationofthisStandardisstatedinitsScope,itisimportanttonotethatitremainstheresponsibilityoftheuserstojudgeitssuitabilityfortheirparticularpurpose.Registeredtrade-markofCanadianStandardsAssociationCettenormeestofferteenanglaisseulementpourlemoment.LaCSApublieralaversionenfranaisdsquelleseraproduiteparlorganismerdacteur.Reviewed byNational Standard of
