CAN/CSA-ISO/IEC 9798-4:02 (R2021)
Information Technology - Security Techniques - Entity Authentication - Part 4: Mechanisms Using a Cryptographic Check Function (Adopted ISO/IEC 9798-4:1999, second edition, 1999-12-15)
Product Details
CSA Preface
Standards development within the Information Technology sector is harmonized with international standards development. Through the CSA Technical Committee on Information Technology (TCIT), Canadians serve as the Canadian Advisory Committee (CAC) on ISO/IEC Joint Technical Committee 1 on Information Technology (ISO/IEC JTC1) for the Standards Council of Canada (SCC), the ISO member body for Canada and sponsor of the Canadian National Committee of the IEC. Also, as a member of the International Telecommunication Union (ITU), Canada participates in the International Telegraph and Telephone Consultative Committee (ITU-T).
This Standard supersedes CAN/CSA-ISO/IEC 9798-4-98 (adoption of ISO/IEC 9798-4:1995).
This International Standard was reviewed by the CSA TCIT under the jurisdiction of the Strategic Steering Committee on Information Technology and deemed acceptable for use in Canada. (A committee membership list is available on request from the CSA Project Manager.) From time to time, ISO/IEC may publish addenda, corrigenda, etc. The CSA TCIT will review these documents for approval and publication. For a listing, refer to the CSA Information Products catalogue or CSA Info Update or contact a CSA Sales representative. This Standard has been formally approved, without modification, by the Technical Committee and has been approved as a National Standard of Canada by the Standards Council of Canada.
Scope
This part of ISO/IEC 9798 specifies entity authentication mechanisms using a cryptographic check function. Two mechanisms are concerned with the authentication of a single entity (unilateral authentication), while the remaining are mechanisms for mutual authentication of two entities.
The mechanisms specified in this part of ISO/IEC 9798 use time variant parameters such as time stamps, sequence numbers, or random numbers, to prevent valid authentication information from being accepted at a later time or more than once.
If a time stamp or sequence number is used, one pass is needed for unilateral authentication, while two passes are needed to achieve mutual authentication. If a challenge and response method employing random numbers is used, two passes are needed for unilateral authentication, while three passes are required to achieve mutual authentication.
Examples of cryptographic check functions are given in ISO/IEC 9797.
An update to this product is available.
To receive notifications when an amendment, new edition or update is available to your standard no matter how you purchased it, please register on the Standards Update Service. After registering, enter the List ID for the relevant standard. The List ID can be found in the “CSA Standards Update” section within the first few pages of the standard you’ve purchased. Once notified, you can then update your standard accordingly.
PDF Format Purchased from the CSA Store
If you have purchased or subscribed to a standard from the CSA Store in PDF format, login to your CSA OnDemandTM account to access the updated PDF.
Paper Format Purchased or Purchased from Reseller
If you have purchased a paper copy of the standard from the CSA Store or purchased a standard in paper or PDF format from one of our resellers, login to the Standards Update Service to download the updates in PDF format.
eBook Format Purchased
If you have purchased a standard in eBook format, login to the CSA Reader App to download the updated version of the standard.
Request Copyright Permissions
