Best Practice Detail
13-8-8631
Service Providers and Equipment Suppliers should establish application support for cryptography that are based on open and widely reviewed and implemented encryption algorithms and protocols. Examples of acceptable algorithms and protocols include AES, Blowfish, RSA, RC5, IDEA, SSH2, SSLv3, TLSv1, and IPSEC. Products should not rely on proprietary or obscure cryptographic measures for security.
Status: Rollover New
References/Comments:
Historical events:
- Service Providers
- Equipment Suppliers
- Wireless
- Cyber Security
- Hardware
- Encryption
- CSRIC VII: Rollover New In CSRIC VII
