ISO/IEC 11770-4:2017

Information technology — Security techniques — Key management — Part 4: Mechanisms based on weak secrets

ISO/IEC 11770-4:2017 defines key establishment mechanisms based on weak secrets, i.e. secrets that can be readily memorized by a human, and hence, secrets that will be chosen from a relatively small set of possibilities. It specifies cryptographic techniques specifically designed to establish one or more secret keys based on a weak secret derived from a memorized password, while preventing offline brute-force attacks associated with the weak secret. ISO/IEC 11770-4:2017 is not applicable to the following aspects of key management: - life-cycle management of weak secrets, strong secrets, and established secret keys; - mechanisms to store, archive, delete, destroy, etc. weak secrets, strong secrets, and established secret keys.

Technologies de l'information — Techniques de sécurité — Gestion de clés — Partie 4: Mécanismes basés sur des secrets faibles

General Information

• Status: Published
• Publication Date: 16-Nov-2017
• ICS: 35.030 - IT Security
• ICS: 35.040 - Information coding
• Technical Committee: ISO/IEC JTC 1/SC 27 - Information security, cybersecurity and privacy protection
• Drafting Committee: ISO/IEC JTC 1/SC 27/WG 2 - Cryptography and security mechanisms
• Current Stage: 9092 - International Standard to be revised
• Completion Date: 27-Oct-2023

Relations

• Amended By: ISO/IEC 11770-4:2017/Amd 1:2019 - Information technology — Security techniques — Key management — Part 4: Mechanisms based on weak secrets — Amendment 1: Unbalanced Password-Authenticated Key Agreement with Identity-Based Cryptosystems (UPAKA-IBC)
• Effective Date: 21-Aug-2021
• Amended By: ISO/IEC 11770-4:2017/Amd 2:2021 - Information technology — Security techniques — Key management — Part 4: Mechanisms based on weak secrets — Amendment 2: Leakage-resilient password-authenticated key agreement with additional stored secrets
• Effective Date: 14-Oct-2020
• Revises: ISO/IEC 11770-4:2006 - Information technology — Security techniques — Key management — Part 4: Mechanisms based on weak secrets
• Effective Date: 04-Nov-2015

Standards Content (Sample)

INTERNATIONAL ISO/IEC
STANDARD 11770-4
Second edition
2017-11
Information technology — Security
techniques — Key management —
Part 4:
Mechanisms based on weak secrets
Technologies de l'information — Techniques de sécurité — Gestion
de clés —
Partie 4: Mécanismes basés sur des secrets faibles
Reference number
ISO/IEC 11770-4:2017(E)
©
ISO/IEC 2017

---------------------- Page: 1 ----------------------
ISO/IEC 11770-4:2017(E)

COPYRIGHT PROTECTED DOCUMENT
© ISO/IEC 2017, Published in Switzerland
All rights reserved. Unless otherwise specified, no part of this publication may be reproduced or utilized otherwise in any form
or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior
written permission. Permission can be requested from either ISO at the address below or ISO’s member body in the country of
the requester.
ISO copyright office
Ch. de Blandonnet 8 • CP 401
CH-1214 Vernier, Geneva, Switzerland
Tel. [phone]
Fax [phone]
[e-mail]
www.iso.org
ii © ISO/IEC 2017 – All rights reserved

---------------------- Page: 2 ----------------------
ISO/IEC 11770-4:2017(E)

Contents Page
Foreword .iv
Introduction .v
1 Scope . 1
2 Normative reference . 1
3 Terms and definitions . 1
4 Symbols and abbreviated terms . 6
5 Requirements . 8
6 Password-authenticated key agreement .10
6.1 General .10
6.2 Balanced Key Agreement Mechanism 1 (BKAM1) .10
6.2.1 General.10
6.2.2 Prior shared parameters .11
6.2.3 Functions .11
6.2.4 Key agreement operation .14
6.3 Balanced Key Agreement Mechanism 2 (BKAM2) .15
6.3.1 General.15
6.3.2 Prior shared parameters .15
6.3.3 Functions .16
6.3.4 Key agreement operation .19
6.4 Augmented Key Agreement Mechanism 1 (AKAM1) .
...