各国政府の暗号政策動向 - c-faculty.chuo-u.ac.jp

1 IPA NTT 20150620 MELT UP 1 20150620 MELT UP 2 20150620 MELT UP 3 IPA 20150620 MELT UP 4 Web EU 5 20150620 MELT UP 6 NISC 20150620 MELT UP 7 OMB 20150620 MELT UP Information Assurance 8 Wiki Information Assurance versus Information Security, NoVAC infosec IA IA (SP800-37)

2 20150620 MELT UP 9 NSA NIST FIPS SP HMG IA Standards HMG Cryptographic Standards CESG agr ment ANSSI DCSSI SAGA BfIT BSI RIA Cybernetica AS GOST 20150620 MELT UP 10 ( ) CMVP NIS KISA ASD Cryptographic Evaluation ASD EU EU 20150620 MELT UP 11 ( ) (NSA/NIST) , FISMA, CNSSP 11 CMVP NIST CC NIAP (NIST+NSA) CMVP, CC (CESG) HMG Security Policy Framework, HMG IA Standards CESG CAPS, CPA CAPS 2 GOTS CPA COTS CC CPA CAPS (ANSSI) Ordonnance n 2005-1516 du 8 d cembre 2005, R f rentiel G n ral de S curit (RGS) ANSSI CC CC CSPN: CC SSCD.

3 Agr ment: RGS 20150620 MELT UP 12 ( ) (BSI) SAGA, IT-Steuerung Bund CC: BSI CMVP (RIA) ISKE (IT Security Standard) CC IT Baseline Protection Manual (FSB) 184-FZ "On Technical Regulation" FSB POCC : CMVP POCC БИ00: CC FSB ( ) ISCCC : CC 20150620 MELT UP 13 ( ) (NIS/KISA) CC (KECS): ITSCC CCRA CMVP: NIS ( ) KECS CMVP (ASD) Protective Security Policy Framework (PSPF) 2013 AISEP: ASD GCSB CC ASD Cryptographic Evaluation: AISEP CC ASD Cryptographic Evaluation EU (ENISA) EU EU ENISA Approved Cryptographic Products.

4 20150620 MELT UP 20150620 MELT UP 14 CRYPTREC JCMVP ( ) (NISC) 26 IPA CC (JISEC) CCRA JCMVP CMVP JCMVP CC 15 20150620 MELT UP (GOTS) (COTS) (CC) GOTS: government off the shelf , COTS: commercial off the shelf 16 20150620 MELT UP 20150620 MELT UP 17 IPA CMVP JCMVP 1229121115304040423475835194646899631610 1918383833604756509181929295826071312161 3172228253019344226372721000115110021021 13000050100150200250 Level4 Level3 Level2 Level1 1382745467082901221191161551951672291852 00208144423104101020123452007 2008 2009 2010 2011 2012 2013 3 2 1421244 3 CMVP JCMVP 5 2014 2014 7 11 200 CMVP JCMVP 18 20150620 MELT UP

5 4634262520141616151411101310666553332202 04060 3233367193223252281419331923178111313862 1115941520171413131712311111111501020304 0506070 EAL1 EAL2 EAL3 EAL4 EAL5 EAL6 EAL7PP 3344171931575555512934394637310441515875 433222050100150200250300350 1181010122211591619184523228121927273232 493534231644141010203040506070 EAL1 EAL2 EAL3 EAL4 EAL5 EAL6 EAL7PP 00002 517234362594134574042CC 425 484 73% 19 20150620 MELT UP 2391432816532050100150200250 18676565038241918151512742050100150200 2122311132346411314178966725211679222230 3235223336213638168620111622614420102030 4050607080 EAL1 EAL2 EAL3 EAL4 EAL5 EAL6 EAL7PP 1103141736504544675741625041461221334223 2851172871715191616252122342148472119162 830523101020304050607080 EAL1 EAL2 EAL3 EAL4 EAL5 EAL6 EAL7PP 05131411720232822275544467354CC 442 529 EAL4 20 20150620 MELT UP 151310644322211111101020 1522841789522312114051015 EAL1 EAL2 EAL3 EAL4 EAL5 EAL6 EAL7PP 0000 101200001151275616141411111010110102030 1121412215241132211211234793623131111051 015 EAL1 EAL2 EAL3 EAL4 EAL5 EAL6 EAL7PP 34434101177763103512CC 89 68 21 20150620 MELT UP CAPS, CPA CC 20150620 MELT UP 22 2014/8/7 CCRA cPP 23 OMB Circular No.

6 A-119 NIST ANSI IETF NIST, NSA, R&D IR&DP, IARPA, DARPA Royal Holloway, University of Bristol CASCADE CNRS, ENS, INRIA Fraunhofer KISA, NSRI, ETRI Queensland University of Technology, Macquarie University 20150620 MELT UP 24 20150620 MELT UP 25 20150620 MELT UP 20150620 MELT UP 26 2011 2014 20150620 MELT UP 27 NISTNSA GSA OMB DHSCNSS NSA OMB Office of Management and Budget DHS Department of Homeland Security NSA National Security Agency GSA General Service Administration NIST National Institute of Standards and Technology CNSS Committee on National Security Systems FISMA2002 OMB NIST OMB OMB NIST OMB 28 20150620 MELT UP

7 The national security strategy (National Technical Authority) OCSIA Office of Cyber Security & Information Assurance NSC National Security Council CPNI Centre for Protection of National Infrastructure GCHQ Government Communications Headquarters CESG Communications-Electronics Security Group 29 20150620 MELT UP 2009 DCSSI 390 D cret n 2009-834 du 7 juillet 2009 CRRTA; CSIRT CC CSPN SGDSN ANSSI Comit strat gique de la SSI DGCIS SAE INRIA CNRS ENS CTG 30 20150620 MELT UP BMI BSI BfIT BFI BMWi BNetzA IT-SB IT IT-Rat IT 2007 IT-Steuerung Bund IT IT IT IT 2007 IT-Steuerung Bund IT BMI BFI BMWi 2007 IT-Steuerung Bund IT 2009 Act to Strengthen the Security of Federal Information Technology IT IT

8 31 20150620 MELT UP RIA RIA Estonian Information System Authority PKI Riigi Infos steemi Ameti p him rus Vastu v etud nr 28 (1) CIIP ) CERT-EE (2) GPKI GPKI ID Majandus- ja Kommunikatsiooniministeeriumi p him rus Vastu v etud nr 323 IT RIA RIA CERT-EE National Security Agency Information board 32 20150620 MELT UP FSB FSTEC 40-FZ On the Federal Security Service GOST FSB Federal Security Bureau KGB FSTEC Federal Service for Technical and Export Control of Russia 33 20150620 MELT UP

9 1 273 34 20150620 MELT UP NIS MoSPA KCC KISA KIISC Korea Institute of Information Security and Cryptology ETRI GCMA Government Certificate Management Authority NCIA National Computing and Information Agency NIS MoSPA KCC KISAGCMAKIISCCMVPETRINSRINCIACC KCIA KECS KCMVP 2009 KISA IDA KIICA KECS KCMVP SEED, HIGHT, ARIA Root CA 35 20150620 MELT UP Intelligence Services Act 2001 ISM AISEP PSPF NSC National Security Committee of Cabinet ASD Australian Signals Directorate ( defense Signals Directorate (DSD)) DECO Defense Export Control Office ACBPS Australian Customs and Border Protection Service SIDCDE Standing Interdepartmental Committee on Defense Exports SECSG Strengthened Export Controls Steering Group AGIMO Australian Government Information Management Office ASIO Australia s national security intelligence service PJCIS.

10 Parliamentary Joint Committee on Intelligence and Security DSTO Defense Science and Technology Organization 36 20150620 MELT UP EU ENISA Regulation (EC) No 460/2004 EU EU