ISO/IEC 23837-2:2023

Information security — Security requirements, test and evaluation methods for quantum key distribution — Part 2: Evaluation and testing methods

This document specifies test and evaluation methods for the security evaluation of quantum key distribution (QKD). It also describes evaluation activities that constitute the test and evaluation methods for the security functional requirements on the implementation of QKD protocols, the quantum optical components and conventional network components in QKD modules. Moreover, supplementary evaluation activities for security assurance requirements are provided to support the security evaluation of QKD with appropriate assurance levels.

Sécurité de l'information — Exigences de sécurité, méthodes d'essais et d'évaluation relatives à la distribution quantique de clés — Partie 2: Méthodes d'essais et d'évaluation

General Information

• Status: Published
• Publication Date: 24-Sep-2023
• ICS: 35.030 - IT Security
• Technical Committee: ISO/IEC JTC 1/SC 27 - Information security, cybersecurity and privacy protection
• Drafting Committee: ISO/IEC JTC 1/SC 27/WG 3 - Security evaluation, testing and specification
• Current Stage: 6060 - International Standard published
• Start Date: 25-Sep-2023
• Due Date: 24-Apr-2023
• Completion Date: 25-Sep-2023

Standards Content (Sample)

INTERNATIONAL ISO/IEC
STANDARD 23837-2
First edition
2023-09
Information security — Security
requirements, test and evaluation
methods for quantum key
distribution —
Part 2:
Evaluation and testing methods
Sécurité de l'information — Exigences de sécurité, méthodes d'essais
et d'évaluation relatives à la distribution quantique de clés —
Partie 2: Méthodes d'essais et d'évaluation
Reference number
ISO/IEC 23837-2:2023(E)
© ISO/IEC 2023

---------------------- Page: 1 ----------------------
ISO/IEC 23837-2:2023(E)
COPYRIGHT PROTECTED DOCUMENT
© ISO/IEC 2023
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on
the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below
or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
ii
  © ISO/IEC 2023 – All rights reserved

---------------------- Page: 2 ----------------------
ISO/IEC 23837-2:2023(E)
Contents Page
Foreword . vi
Introduction .vii
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Abbreviated terms . 3
5 Overview of the evaluation method for QKD modules . 4
5.1 General . 4
5.2 Scope of the evaluation method . 4
5.3 Overview of evaluation activities for SFRs . 5
5.3.1 General . 5
5.3.2 EAs for SFRs FTP_QKD.1 and FTP_QKD.2 . 6
5.3.3 EAs for SFRs on quantum optical components and parameter adjustment
procedure(s) . 6
5.3.4 EAs for SFRs on conventional network components . 7
5.3.5 Thresholds and input parameters related to the evaluation activities . 7
5.4 Overview of evaluation activities for SARs . 8
6 EAs for the evaluation of FTP_QKD . 8
6.1 General . 8
6.2 EA to test quantum state transmission and sifting procedures . 10
6.2.1 General aspects .
...

INTERNATIONAL ISO/IEC
STANDARD 23837-2
First edition
Information security — Security
requirements, test and evaluation
methods for quantum key
distribution —
Part 2:
Evaluation and testing methods
Sécurité de l'information — Exigences de sécurité, méthodes d'essais
et d'évaluation relatives à la distribution quantique de clés —
Partie 2: Méthodes d'essais et d'évaluation
PROOF/ÉPREUVE
Reference number
ISO/IEC 23837-2:2023(E)
© ISO/IEC 2023

---------------------- Page: 1 ----------------------
ISO/IEC 23837-2:2023(E)
COPYRIGHT PROTECTED DOCUMENT
© ISO/IEC 2023
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on
the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below
or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
ii
PROOF/ÉPREUVE © ISO/IEC 2023 – All rights reserved

---------------------- Page: 2 ----------------------
ISO/IEC 23837-2:2023(E)
Contents Page
Foreword . vi
Introduction .vii
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Abbreviated terms . 3
5 Overview of the evaluation method for QKD modules . 4
5.1 General . 4
5.2 Scope of the evaluation method . 4
5.3 Overview of evaluation activities for SFRs . 5
5.3.1 General . 5
5.3.2 EAs for SFRs FTP_QKD.1 and FTP_QKD.2 . 6
5.3.3 EAs for SFRs on quantum optical components and parameter adjustment
procedure(s) . 6
5.3.4 EAs for SFRs on conventional network components . 7
5.3.5 Thresholds and input parameters related to the evaluation activities . 7
5.4 Overview of evaluation activities for SARs . 8
6 EAs for the evaluation of FTP_QKD . 8
6.1 General . 8
6.2 EA to test quantum state transmission and sifting procedures . 10
6.2.1 General aspects .
...

ISO/IEC DIS 23837--2:20222023(E)
Style Definition: Heading 1: Indent: Left: 0 pt, First
line: 0 pt, Tab stops: Not at 21.6 pt
ISO/IEC JTC 1/SC 27/WG 3
Style Definition: Heading 2: Font: Bold, Tab stops: Not
Date: 2023-01-1206-20
at 18 pt
Information security — Security requirements, test and evaluation methods for quantum key
Style Definition: Heading 3: Font: Bold
distribution — Part 2: TestEvaluation and evaluationtesting methods
Style Definition: Heading 4: Font: Bold

Style Definition: Heading 5: Font: Bold

Style Definition: Heading 6: Font: Bold
Style Definition: ANNEX

Style Definition: zzCopyright

Style Definition: AMEND Terms Heading: Font: Bold
Style Definition: AMEND Heading 1 Unnumbered:
Font: Bold

Style Definition: Footnote Reference
Style Definition: Footnote Text

Style Definition: 井号 1
标签

Style Definition: List Bullet: Indent: Left: 0 pt, Hanging:
18 pt, No bullets or numbering, Tab stops: 18 pt, List

tab
Style Definition: List Bullet 3: Indent: Left: 28.3 pt,

Hanging: 18 pt, No bullets or numbering, Tab stops:
46.3 pt, List tab

Style Definition: List Bullet 4: Indent: Left: 42.45 pt,

Hanging: 18 pt, No bullets or numbering, Tab stops:
60.45 pt, List tab

Style Definition: List Bullet 5: Indent: Left: 56.6 pt,
Hanging: 18 pt, No bullets or numbering, Tab stops:

74.6 pt, List tab
Style Definition: List Number: Indent: Left: 0 pt,

Hanging: 18 pt, No bullets or numbering, Tab stops:
18 pt, List tab

Style Definition: List Number 5: Indent: Left: 56.6 pt,
Hanging: 18 pt, No bullets or numbering, Tab stops:
74.6 pt, List tab

Style Definition: @他1
Style Definition: 智能超链接1

Style Definition: 未处理的提及2

Style Definition: Unresolved Mention2
Style Definition: IneraTableMultiPar: Font: Don't adjust

space between Latin and Asian text, Don't adjust space
between Asian text and numbers, Tab stops: 19.85 pt,

Left + 39.7 pt, Left + 59.55 pt, Left + 79.4 pt, Left +
99.25 pt, Left + 119.05 pt, Left + 138.9 pt, Left +

158.75 pt, Left + 178.6 pt, Left + 198.45 pt, Left

---------------------- Page: 1 ----------------------
Sécurité de l'information — Exigences de sécurité, méthodes d'essais et d'évaluation relatives à la
distribution quantique de clés — Partie 2: Méthodes d'essais et d'évaluation

---------------------- Page: 2 ----------------------
© ISO 20222023
Formatted: No page break before
Formatted: Default Paragraph Font
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no
part of this publication may be reproduced or utilized otherwise in any form or by any means,
electronic or mechanical, including photocopying, or posting on the internet or an intranet, without
prior written permission. Permission can be requested from either ISO at the address below or
ISO’sISO's member body in the country of the requester.
ISO copyright officeCopyright Office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: + 41 22 749 01 11
Email: [e-mail]
Email: [e-mail]
Website: www.iso.orgwww.iso.org
Published in Switzerland.

---------------------- Page: 3 ----------------------
ISO/IEC DIS 23837-2:2022(E)
Contents
Foreword . v
Introduction . vi
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Abbreviated terms . 3
5 Overview of the evaluation method for QKD modules . 4
5.1 General . 4
5.2 Scope of the evaluation method . 4
5.3 Overview of evaluation activities for SFRs . 5
5.3.1 General . 5
5.3.2 EAs for SFRs FTP_QKD.1 and FTP_QKD.2 .
...