DID FinderBack
Source
DI-TMSS-82312

Key Specification (KS)

Describes the ordering, generation, distribution, and validation of cryptographic key material for systems and equipment requiring key material, based on the Key and Certification Management Plan.

Approval DateDecember 18, 2019
AMSC Number10135
Preparing ActivityNS
Project NumberTMSS-2020-003
OPR—
DTIC ApplicableNo
GIDEP ApplicableNo
Limitation—
Applicable FormsNone
Approval Limitation—
Form Version—
DID Formatfree_text
963C CompliantYes
DISTRIBUTION STATEMENT A: Approved for public release; distribution is unlimited.
Supersedes
DI-MISC-80508B
Related
—

Description & Purpose

—

Application & Interrelationship

—

Use & Relationship

The Key Specification (KS) describes the ordering, generation, distribution, and validation of the key material.

a. Key Generation: The KS should designate and describe all types, uses and formats of key required by the application. The KS should also describe the data format, encryption algorithms, parity, checkword algorithms, data constraints, and relationships of one cryptographic application key to another.

b. Key Distribution/Consumption: The KS should describe the type of key and Meta data or fill object the equipment/system will consume. The KS should tailor the mission key and supporting delivery data standards selected from the electronic key delivery references (Electronic Key Management System (EKMS) and Key Management Infrastructure (KMI)) for consumption by the equipment/system based on the Key and Certification Management Plan (KCMP). Note: Over-the-Network Keying is the recommended solution to ensure mission key confidentiality and integrity through distribution and use to ultimate destruction.

c. Key Validation: The KS should contain the results of associated tests to verify that the cryptographic key validation material received agree with the cryptographic key requirements stipulated in the KCMP and KS for the equipment/system. It details the test requirements, describes the tests performed and provides the associated test results and analysis. It is used by the Government to indicate format, function and compatibility acceptance of the cryptographic key software, developed from KS submittal, and resulting key material for use in the equipment/system.

d. This Data Item Description (DID) contains format and content preparation instructions for the data product generated by the specific and discrete task requirement as delineated in the legal agreement, as the KS.

e. This DID is applicable to systems and equipment requiring cryptographic key material.

f. This DID is related to the Tailored Security Design and Analysis Requirements Specification.

g. This DID supersedes prior reference to DI-MISC-80508B titled Technical Report-Study/Services.

Preparation Instructions

1Reference documentsThe applicable issue of the documents cited herein, including their approval dates and dates of any applicable amendments, notices, and revisions, shall be as specified in the legal agreement.
1.1National Security Agency/Central Security Service (NSA/CSS) Policy Manual 1-52
1.2Technical Security Requirements List (TSRD) for User Partnership Program (UPP), Commercial Communications Security Evaluation Program (CCEP), and Waveforms, Section 2.9
1.3Committee on National Security Systems (CNSS) Policy 30, Cryptographic Key Protection
1.4KCMP Data Item Description, DI-MISC-81688A
1.5KS Template, Version 1.0
1.6KS Validation Report Appendix Template, Version 1.0
1.7EKMS 300-399, Key Management Standards
1.8EKMS 600-699, Interface Specifications
1.9KMI 3000-3999, Technical Standards
1.10CNSS Instruction (CNSSI) No. 4001, "Controlled Cryptographic Items (CCI)"
1.11CNSSI No. 4031, "Cryptographic High Value Products (CHVP)"
1.12CNSSI No. 4003, "Reporting and Evaluating COMSEC Incidents"
2FormatThe KS and KS Validation Report Appendix shall:
2.1Be formatted strictly in accordancewith the KS and KS Validation Report Appendix Templates established for this purpose and referenced in paragraph 1.5 and 1.6 respectively of this DID, under the "Reference Documents" section.
2.2Be appropriately classified and portion markedin accordance with National Security Agency/Central Security Service (NSA/CSS) Policy Manual 1-52.
2.3Be submitted in either Microsoft Wordor Adobe PDF format. Adobe PDF format is preferred as it supports more efficient tracking and management of changes.
2.4Not contain embedded files(i.e. Microsoft Visio drawings). All pictures and diagrams must be converted to a JPG or similar format.
2.5Include a title page that minimally identifiesthe following:
2.5.1Program name
2.5.2Contract number
2.5.3Contract Data Requirements List (CDRL) Number
2.5.4Revision and date
2.5.5Program Manager's name and telephone number and, if applicable, the NSA Cybersecurity Certification Manager's (CSCM's) name and office designator
2.5.6Classification
2.6Include a Revision Pagelisting all past changes to the document in reverse chronological order.
2.7Include a list of Reference DocumentsThis would include all documents used to develop the KS, approved KCMP, and any supporting test validation documentation.
2.8Include a Table of Contents
2.9Include a Table defining all abbreviations and acronyms
2.10Total page count for the KS shouldnot exceed 30 pages, with font size and type 12 Times New Roman. NSA reserves the right to return KSs numbering 30 or more pages with instructions to make them more concise and readable.
3ContentsThe KS and KS Validation Report Appendix shall:
3.1Be completed using the KS TemplateVersion 1.0 and the KS Validation Report Appendix Template Version 1.0, included in this DID. NOTE: Not all requested information will apply.
4The Key Specification Template, Version 1.0and Key Validation Report Appendix Template, Version 1.0, follow on the next page.

References

—

Figures

Figure 1: Key Specification Template, Version 1.0 - Title Page

Figure 1. Key Specification Template, Version 1.0 - Title Page

Figure 2: Key Specification Template, Version 1.0 - Approvals and Revision History

Figure 2. Key Specification Template, Version 1.0 - Approvals and Revision History

Figure 3: Key Specification Template, Version 1.0 - Table of Contents

Figure 3. Key Specification Template, Version 1.0 - Table of Contents

Figure 4: Key Specification Template, Version 1.0 - Sections 1 Introduction through 4.1.1 Key Format Example

Figure 4. Key Specification Template, Version 1.0 - Sections 1 Introduction through 4.1.1 Key Format Example

Figure 5: Key Specification Template, Version 1.0 - Sections 4.2 Key Parity through 6.1 Key Production

Figure 5. Key Specification Template, Version 1.0 - Sections 4.2 Key Parity through 6.1 Key Production

Figure 6: Key Specification Template, Version 1.0 - Sections 6.1.1 Production Constraints through 7 Distribution

Figure 6. Key Specification Template, Version 1.0 - Sections 6.1.1 Production Constraints through 7 Distribution

Figure 7: Key Validation Report Appendix Template, Version 1.0 - Title Page

Figure 7. Key Validation Report Appendix Template, Version 1.0 - Title Page

Figure 8: Key Validation Report Appendix Template, Version 1.0 - Table of Contents

Figure 8. Key Validation Report Appendix Template, Version 1.0 - Table of Contents

Figure 9: Key Validation Report Appendix Template, Version 1.0 - Sections A.1 Introduction through A.3.1.4

Figure 9. Key Validation Report Appendix Template, Version 1.0 - Sections A.1 Introduction through A.3.1.4

Figure 10: Key Validation Report Appendix Template, Version 1.0 - Sections A.3.2 through A.7 Validation Signatory

Figure 10. Key Validation Report Appendix Template, Version 1.0 - Sections A.3.2 through A.7 Validation Signatory

Schema v3.0Community-maintained · Verify against ASSIST
Community-maintained — not an official government database.
Verify against ASSIST·GitHub·About·Disclaimer