ISO/IEC 9797-1:2011/Amd 1:2023

Information technology — Security techniques — Message Authentication Codes (MACs) — Part 1: Mechanisms using a block cipher — Amendment 1

Technologies de l'information — Techniques de sécurité — Codes d'authentification de message (MAC) — Partie 1: Mécanismes utilisant un chiffrement par blocs — Amendement 1

General Information

• Status: Published
• Publication Date: 24-Aug-2023
• ICS: 35.030 - IT Security
• Technical Committee: ISO/IEC JTC 1/SC 27 - Information security, cybersecurity and privacy protection
• Drafting Committee: ISO/IEC JTC 1/SC 27/WG 2 - Cryptography and security mechanisms
• Current Stage: 6060 - International Standard published
• Start Date: 25-Aug-2023
• Due Date: 11-Mar-2024
• Completion Date: 25-Aug-2023

Relations

• Amends: ISO/IEC 9797-1:2011 - Information technology — Security techniques — Message Authentication Codes (MACs) — Part 1: Mechanisms using a block cipher
• Effective Date: 14-Aug-2021

Overview

ISO/IEC 9797-1:2011/Amd 1:2023 is the latest amendment to the international standard for message authentication codes (MACs) that use block cipher mechanisms. Developed under ISO and IEC, this standard is crucial for organizations and professionals involved in information security, particularly in safeguarding message integrity and authenticity.

The amendment introduces important updates to the original standard, guiding implementation and selection of secure MAC algorithms. It enhances alignment with current cryptographic best practices and addresses legacy mechanisms, supporting robust cybersecurity measures for both new and existing systems.

Key Topics

• Block Cipher MAC Mechanisms
  The standard focuses on message authentication codes that utilize block cipher algorithms for generating cryptographically secure MACs.

• Amendment Highlights

  • Algorithm Update: Recommends that MAC Algorithm 3, intended for use with outdated cryptographic primitives, should not be deployed in new applications.
  • Symbol Addition: Updates the notation, introducing 'K e' to designate the block cipher within the MAC algorithm.
  • Security Clarification: Revises guidance regarding the anticipated security benefits of certain mechanisms, reflecting updated analysis and expert consensus.

• Best Practice Guidance
  Encourages the use of modern, secure MAC algorithms in new implementations, and clarifies the motivation for deprecating or removing legacy options.

Applications

Implementing ISO/IEC 9797-1:2011/Amd 1:2023 is essential across various sectors that require reliable message authentication and data integrity controls, such as:

• Banking and Finance: Secures electronic payment systems, banking transactions, and financial communications.
• Government and Defense: Ensures authenticity of sensitive data exchanges in critical national infrastructure.
• Enterprise IT: Integrates into authentication protocols, safeguarding business communications and preventing tampering.
• Telecommunications: Protects signaling and control messages in telecom networks.
• Embedded and IoT Devices: Enables secure device communication and firmware updates, reducing vulnerability to cyberattacks.

Adopting the latest amendment ensures that organizations benefit from up-to-date information security techniques and meet compliance requirements for cryptographic standards in message authentication.

Related Standards

For comprehensive security architecture, organizations should consider the following related ISO and IEC standards:

• ISO/IEC 9797 series: Covers additional parts and amendments focusing on message authentication code techniques.
• ISO/IEC 27001: Information security management systems - for a broad framework on organizational security practices.
• ISO/IEC 10118 series: Standards for hash functions, relevant to message integrity and authentication.
• ISO/IEC 11770: Specifies key management techniques central to secure block cipher implementation.
• ISO/IEC 18033: Details encryption algorithms, useful for selecting appropriate block ciphers for MACs.

In summary, ISO/IEC 9797-1:2011/Amd 1:2023 supports the secure implementation of block cipher-based message authentication codes, provides updated guidance for practitioners, and reinforces overall data protection strategies in line with global security standards.

Standards Content (Sample)

INTERNATIONAL ISO/IEC
STANDARD 9797-1
Second edition
2011-03-01
AMENDMENT 1
2023-08
Information technology — Security
techniques — Message Authentication
Codes (MACs) —
Part 1:
Mechanisms using a block cipher
AMENDMENT 1
Technologies de l'information — Techniques de sécurité — Codes
d'authentification de message (MAC) —
Partie 1: Mécanismes utilisant un chiffrement par blocs
AMENDEMENT 1
Reference number
ISO/IEC 9797-1:2011/Amd. 1:2023(E)
© ISO/IEC 2023
ISO/IEC 9797-1:2011/Amd. 1:2023(E)
© ISO/IEC 2023
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on
the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below
or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
ii
© ISO/IEC 2023 – All rights reserved

ISO/IEC 9797-1:2011/Amd. 1:2023(E)
Foreword
ISO (the International Organization for Standardization) and IEC (the International Electrotechnical
Commission) form the specialized system for worldwide standardization. National bodies that are
members of ISO or IEC participate in the development of International Standards through technical
committees established by the respective organization to deal with particular fields of technical
activity. ISO and IEC technical committees collaborate in fields of mutual interest. Other international
organizations, governmental and non-governmental, in liaison with ISO and IEC, also take part in the
work.
The procedures used to develop this document and those intended for its further maintenance
are described in the ISO/IEC Directives, Part 1. In particular, the different approval criteria
needed for the different types of document should be noted. This document was drafted in
accordance with the editorial rules of the ISO/IEC Directives, Part 2 (see www.iso.org/directives or
www.iec.ch/members_experts/refdocs).
ISO and IEC draw attention to the possibility that the implementation of this document may involve the
use of (a) patent(s). ISO and IEC
...