Unmanned Aircraft Systems Roadmap 2005-2030 - Federation of ...

UAS ROADMAP 2005
� SDN.706, X.509 Certificate and Certificate Revocation List Profiles and Certification Path
+Processing Rules, Revision D, 12 May 1999. [SUNSET] This standard will be deleted when GES
can provide secure messaging confirmation, to include authentication, delivery and encryption.
� SDN.801, Access Control Concept and Mechanisms, Revision C, 12 May 1999. [SUNSET] This
standard will be deleted when GES can provide secure messaging confirmation, to include
authentication, delivery and encryption.
The secure/multipurpose internet mail extensions (S/MIME) v3 protocol suite provides application layer
privacy, integrity, and non-repudiation (proof of origin) security services for messaging (e-mail). Three
internet engineering task force (IETF) RFCs—RFC 2630, RFC 2632, and RFC 2633—provide the core
security services listed above. For individual messages that use certificates issued by the DoD public-key
infrastructure (PKI) to protect unclassified, sensitive information or sensitive information on system high
networks the following standards are mandated:
� IETF RFC 2630, Cryptographic Message Syntax, June 1999. [SUNSET] This standard will be deleted
when new standards are selected as part of the development of the IA component of the GIG
architecture.
� IETF RFC 2632, S/MIME Version 3 Certificate Handling, June 1999.
� IETF RFC 2633, S/MIME Version 3 Message Specification, June 1999.
IETF RFC 2634 provides optional enhanced security services, which are signed receipts (nonrepudiation—proof
of receipt), security labels, secure mailing lists, and signing certificates. For enhanced
security services, the following standard is mandated:
� IETF RFC 2634, Enhanced Security Services for S/MIME, June 1999.
Cryptographic Security Services
To support interoperability using encrypted messages, products must share a common communications
protocol. This protocol must include common cryptographic message syntax, common cryptographic
algorithms, and common modes of operation (e.g., cipher-block chaining). The mechanisms to provide
the required security services are as follows.
Encryption Algorithms
Encryption algorithms are a set of mathematical rules for rendering information unintelligible by affecting
a series of transformations to the normal representation of the information through the use of variable
elements controlled by a key.
The following standard is mandated when the security policy or the program security profile requires this
level of protection, and Fortezza applications are in use:
� SKIPJACK and KEA Algorithm Specification, Version 2.0, NIST, 29 May 1998. [SUNSET] This
standard will be deleted when AES becomes the mandated standard.
For those systems required or desiring to use a cryptographic device to protect privacy-act information
and other unclassified information not covered by the Warner Amendment to Public Law 100-235, the
following standard is mandated:
� FIPS PUB 46-3, Data Encryption Standard, 25 October 1999. [SUNSET] This standard will be
deleted when AES becomes the mandated standard.
Signature Algorithms
A signature algorithm is an algorithm developed to assure message-source authenticity and integrity. The
intent of the signature is to provide a measure of assurance that the person signing the message actually
sent the message that is signed, and that the content of the message has not been changed. The following
standard is mandated when the security policy or program-security profile requires this level of
protection:
APPENDIX E – INTEROPERABILITY STANDARDS
Page E-13