ANSI X9.F.1

Cryptographic Standards

What is ANSI X9.F.1?

ANSI - American National Standards Institute
X9 - American Bankers Association
F - Financial Institution Security
1 - Tools
Open meetings 4 times a year
ANSI X9.F goes to ISO TC68 twice a year

X9 is an ANSI-approved organization that creates standards for the financial services industry, which includes banks and credit card companies. Within X9, the X9F subcommittee deals with data and information security issues. X9F has five working groups:

X9F1 – Cryptographic Tools
X9F3 – Protocols
X9F4 – Cryptographic Applications
X9F5 – Digital Signature and Certificate Policy
X9F6 – Cardholder Authentication and ICC’s

ANSI X9.F.1 Requirements

Bankers have perhaps the highest security requirements
Billions of dollars are transferred electronically daily
Single transactions can easily total millions of dollars
Others: “If it’s good enough for bankers, it’s good enough for me.”

Why X9 standards?

Mitigate risk of doing business
Increase assurance of high level of security via open discussion
Aid interoperability by encouraging vendor convergence
Help determine prudent practice
Aid assurance of correct implementation via conformance testing

Symmetric Key

X9.9 Message Authentication Code - Wholesale
X9.19 Message Authentication Code - Retail
X9.23 Message Encryption
X9.52 Triple DES (ballot)

Public Key Cryptography:

X9.30 Public Key Cryptography Using Irreversible Algorithms (1-2)
X9.31 Digital Signatures Using Reversible Public Key Cryptography
X9.42 Agreement of Symmetric Keys Using Diffie-Hellman
X9.44 Key Establishment Using Integer Factorization Cryptography
X9.62 2005 X9.62-The Elliptic Curve Digital Signature Algorithm
X9.63 Key Agreement and Key Transport Using Elliptic Curve Cryptography
X9.65 TDEA Implementation Standard
X9.70 Symmetric Key Distribution Using Public Key
X9.80 Prime Number Generation Primality Testing, and Primality Certificates
X9.82 Parts 1-4 Random X9.82 — Number Generation
X9.92 Digital Signature Algorithms Giving Partial Message Recovery

Digital Signatures

X9.30 DSA - Digital Signature Algorithm (based on FIPS 186)
X9.31 rDSA - reversible Digital Signature Algorithm (RSA and Rabin-Williams) (ballot)
X9.62 ECDSA - Elliptic Curve Digital Signature Algorithm (ballot)

Key Establishment

X9.17 - Symmetric Key Encryption
X9.42 - Diffie-Hellman Key Agreement (Unified Model and MQV) (ballot, ideas input to IEEE)
X9.44 - RSA Key Transport (in process)
X9.63 - Elliptic Curve Key Establishment (in process)

Key Management Protocols:

X9.69 Framework for Key Management Extensions
X9.70 Symmetric Key Distribution Using Public Key
X9.73 Cryptographic Message Syntax
X9.77 Public Key Infrastructure Protocols

Retail Key Management:

X9.24 Symmetric Key Management
X9.65 Triple Data Encryption Algorithm (TDEA) Implementation
X9.69 Key Extensions
X9.79 PKI Part 1 Framework

Certificates

X9.57 Certificate Management
X9.55 Certificate Extensions
X9.45 Attribute Certificates (ballot) ??

Conformance Testing

X9.66 - Security Requirements for Cryptographic Modules (draft based on FIPS 140-1)
X9 TG - Guidelines for Validating Implementations (proposal) - SHA-1, DSA, rDSA, ECDSA, DH, T-DES, etc.

Other:

X9.45 Enhanced Controls
X9.49 Secure Remote Access
X9.55 Extensions
X9.57 Certificate Management
X9.68 Short Certificates
X9.79 Public Key Infrastructure (PKI) Policy and Practices Framework
X9.84 Biometric Security
X9.88 Enhanced Digital Signatures
X9.95 Trusted Time Stamp
X9.96 XML Cryptographic Message Syntax (XCMS) [same abstract values, security levels, cryptographic processing as in X9.73]
X9.102 Wrapping of Keys and Associated Data
X9.111 Pen Test
X9.112 Wireless Part 1: General
X9.113 Trusted Transaction