ISO/IEC FDIS 29128-3Under development

Information security, cybersecurity and privacy protection — Verification of cryptographic protocols — Part 3: Evaluation methods and activities for protocol implementation verification

Sécurité de l'information, cybersécurité et protection de la vie privée — Vérification des protocoles cryptographiques — Partie 3: Méthodes et activités d'évaluation pour la vérification de la mise en œuvre des protocoles

Abstract / scope

This document gives guidance on evaluating the implementation of a cryptographic protocol based on the framework provided in ISO/IEC 15408-4. This document specifies the required methods and activities to assess the conformance of a cryptographic protocol implementation to its ISO/IEC 29128-2 based formally verified protocol model. This document specifies assurance metrics for the integrated evaluation of both the cryptographic protocol and its implementation.