Security standards and NIST compliance in Digital Access component

This article describes the compliance of the Smart ID Digital Access component to security standards and NIST-approved cryptographic algorithms. 

Security standards

• PKI – Public Key Infrastructure, see PKCS

• Javascript Object Signing and Encryption (JOSE), see https://www.iana.org/assignments/jose/jose.xhtml

• RSA2048 key size, or higher.

• RSA PKCS#1 signature with SHA-256, see RFC 8017: PKCS #1: RSA Cryptography Specifications Version 2.2

• AES encryption, see https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.197.pdf

• X.509 certificates support, see RFC 2459: Internet X.509 Public Key Infrastructure Certificate and CRL Profile

• PKCS#10 Certificate Signing Request, see RFC 2986: PKCS #10: Certification Request Syntax Specification Version 1.7  

• PKCS#12 archive file format bundling private keys with X.509 Certificates, see RFC 7292: PKCS #12: Personal Information Exchange Syntax v1.1