ISO/IEC 9798-5:2004
Information technology -- Security techniques -- Entity authentication -- Part 5: Mechanisms using zero-knowledge techniques
General information
Number of Pages:
| Edition: 2 (Monolingual) | ICS: 35.040 |
| Status: Withdrawn | Stage: 95.99 (2009-12-11) |
| TC/SC: JTC 1/SC 27 |
Abstract
ISO/IEC 9798-5:2004 specifies authentication mechanisms in the form of exchange of information between a claimant and a verifier.
In accordance with the types of calculations that need to be performed by a claimant and the verifier (see Annex C), the mechanisms specified in ISO/IEC 9798-5:2004 can be classified into four main groups.
- The first group is characterized by the performance of short modular exponentiations. The challenge size needs to be optimized since it has a proportional impact on workloads.
- The second group is characterized by the possibility of a "coupon" strategy for the claimant. A verifier can authenticate a claimant without computational power. The challenge size has no impact on workloads.
- The third group is characterized by the possibility of a "coupon" strategy for the verifier. A verifier without computational power can authenticate a claimant. The challenge size has no impact on workloads.
- The fourth group has no possibility of a "coupon" strategy.
Corrigenda, Amendments and other parts
These standards could also interest you
-
ISO/IEC 9798-1:2010
Information technology -- Security techniques -- Entity authentication -- Part 1: General -
ISO/IEC TR 19791:2010
Information technology -- Security techniques -- Security assessment of operational systems -
ISO/IEC 27003:2010
Information technology -- Security techniques -- Information security management system implementation guidance
News feeds
