International standards in the field of cryptography

Abstract

Using mathematical algorithms and transformations to protect data by encrypting it, cryptographic mechanisms are reliable and indispensable methods of protecting information today. However, without certain rules, requirements and recommendations for the use of cryptographic mechanisms, the implementation of encryption does not provide adequate protection against information security threats. To solve this problem, it is necessary to focus on international standards in the field of cryptography, which contain the best techniques, practices and recommendations for ensuring data security. This paper reviews four ISO technical committees (ISO/IEC JTC 1/SC 27, ISO/IEC JTC 1/SC 29, ISO/IEC JTC 1/SC 29, ISO/IEC JTC 1/SC 6b ISO/TC 68/SC 2) involved in the development and regulation of international cryptographic standards. The cryptographic standards developed by these committees are analyzed. International standards are categorized by the type of cryptographic security mechanisms considered. Six main categories were identified, such as encryption mechanisms, authentication mechanisms, hash function mechanisms, key management mechanisms, prime number and bit generators, and requirements for cryptographic modules. Forty-eight international standards are analyzed by category, of which forty are active and eight are under development. The content of the most relevant international standards from each category is disclosed, their goals and objectives are indicated. The question of adaptation and harmonization of the considered international standards in the Republic of Kazakhstan is touched upon, as they play a key role in guaranteeing data security during their transmission and storage.