XCBF 5/16/2002: [xcbf] Reference Documents ALSO

[Phil Griffin <phil.griffin@asn-1.com>]

John,

The following references are taken from  X9.84, which itself
needs to be referenced along with CBEFF and both BioAPI 1.0
and 1.1 (as an approved ANS). I can right now the very likely
need for 2, 3, 4, 5, 6, 8, 9, 13, 14, 16-21 updated to the 2002
edition + X.693, and Monica's suggested ISO/IEC version of 21.

Phil

[1] ANSI X9.19-1996 Financial Institution Retail Message 
    Authentication

[2] ANSI X9.30-1997 Public Key Cryptography Using Irreversible 
    Algorithms for the Financial Services Industry, Part 1: The
    Digital Signature Algorithm (DSA)

[3] ANSI X9.30-1997  Public Key Cryptography Using Irreversible
    Algorithms for the Financial Services Industry, Part 2: The
    Secure Hash Algorithm (SHA)

[4] ANSI X9.31-1998 Public Key Cryptography Using Reversible
    Algorithms for the Financial Services Industry:  The RSA
    Signature Algorithm

[5] ANSI X9.42 (draft) Public Key Cryptography for the 
    Financial Services Industry: Agreement of Symmetric
    Keys Using Discrete Logarithm Cryptography

[6] ANSI X9.44 (draft) Public Key Cryptography Using 
    Reversible Algorithms for the Financial Services 
    Industry: Management of Symmetric Keys Using RSA

[7] ANSI X9.49-1998 Secure Remote Access to Financial Services

[8] ANSI X9.52-1999 Triple Data Encryption Algorithm Modes 
    of Operation

[9] ANSI X9.62-1999 Public Key Cryptography for the 
    Financial Services Industry: The Elliptic Curve 
    Digital Signature Algorithm (ECDSA)

[10] ANSI X9.63 (draft) Public Key Cryptography for the 
     Financial Services Industry: Key Agreement and Key 
     Transport Using Elliptic Curve Technology

[11] ANSI X9.66 (draft) Security Requirements for 
     Cryptographic Modules 

[12] ANSI X9.69-1998 Framework for Key Management Extensions 

[13] ANSI X9.71-1999 Keyed Hash Message Authentication Code (HMAC)

[14] ANSI X9.73 (draft) Cryptographic Message Syntax (CMS)

[15] ANSI X9.79-2000 Certificate Policies and Practices

[16] X.680-1997 ITU-T Recommendation X.680 (1997) | 
     ISO/IEC 8824-1:1998, Information Technology - 
     Abstract Syntax Notation One (ASN.1):  
     Specification of Basic Notation

[17] X.681-1997 ITU-T Recommendation X.681 (1997) | 
     ISO/IEC 8824-2:1998, Information Technology - 
     Abstract Syntax Notation One (ASN.1):  
     Information Object Specification

[18] X.682-1997 ITU-T Recommendation X.682 (1997) | 
     ISO/IEC 8824-3:1998, Information Technology - 
     Abstract Syntax Notation One (ASN.1):  
     Constraint Specification

[19] X.683-1997 ITU-T Recommendation X.683 (1997) | 
     ISO/IEC 8824-4:1998, Information Technology - 
     Abstract Syntax Notation One (ASN.1):  
     Parameterization of ASN.1 Specifications

[20] X.690-1997 ITU-T Recommendation X.690 (1997) | 
     ISO/IEC 8825-1:1998, Information Technology - 
     ASN.1 Encoding Rules: Specification of Basic 
     Encoding Rules (BER), Canonical Encoding Rules
     (CER) and Distinguished Encoding Rules (DER)

[21] X.691-1997 ITU-T Recommendation X.691 (1997) | 
     ISO/IEC 8825-2:1998, Information Technology - 
     ASN.1 Encoding Rules: Specification of Packed
     Encoding Rules (PER)

[22] ISO 11568 Key Life Cycle

[23] ISO DIS 13491-1998 Banking - Secure Cryptographic
      Devices (Retail), Part 2:  Security Compliance
      Checklists for Devices used in Magnetic Stripe
      Card Systems 

[24] British Standard (BS) 7799-1999 Code of Practice
     for Information Security Management 

[25] ISO DIS 15782 Banking - Certificate Management Part 1: Public Key
Certificates